Re: kern/51346: rump's module autoload incompatable with paxctl m&a

[christos%zoulas.com@localhost (Christos Zoulas)]

On Sep 28,  7:19pm, paul%whooppee.com@localhost (Paul Goyette) wrote:
-- Subject: Re: kern/51346: rump's module autoload incompatable with paxctl m

| On Wed, 28 Sep 2016, David Holland wrote:
| 
| >  > Forward to audit trail:
| >  >
| >  > : needs mprotect disable since it loads kernel code and relocates it.
| >  >
| >  > : don't disable PIE
| >
| > so it still needs +a in PAXCTL_FLAGS?
| 
| As of right now, yes it still needs +a
| 
| Without +a, it fails for me on 12 out of 20 test runs (60% fail rate).
| 
| With +a, it succeeds 20 out of 20 (100% success rate).

With +a it would either succeed 100% of 0% since it is deterministic.

christos