[rsbac] PaX & libs

[Amon Ott]

On Donnerstag 29 September 2005 17:58, Andrea Pasquinucci wrote:
> There are some libraries which break PaX M protection, they require 
'm', 
> I tried to set the flag to the library but it does not work, I have 
to 
> flag all binaries which use the library, which is quite a pain. 
Examples 
> are libasound or libflashplayer (macromedia flash for mozilla). I 
guess 
> that there is little I can do and just look for all binaries that 
depend 
> on them... or not? Thanks, 

It would be very dangerous allowing a library to switch off PaX 
protection for all programs using it.

Apart from that, it could be implemented. Just remove PaX flags with 
every mapped library, i.e., on every MAP_EXEC, if the lib has them 
off.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
-------------- nächster Teil --------------
Ein Dateianhang mit Bin?rdaten wurde abgetrennt...
Dateiname   : nicht verf?gbar
Dateityp    : application/pgp-signature
Dateigr??e  : 189 bytes
Beschreibung: nicht verf?gbar
URL         : http://rsbac.dyndns.org/pipermail/rsbac/attachments/20050930/003ed6fb/attachment.bin