YAMAMOTO Takashi wrote:
>> Module Name:	src
>> Committed By:	elad
>> Date:		Thu Feb  8 02:59:51 UTC 2007
>>
>> Modified Files:
>> 	src/usr.sbin/paxctl: Makefile
>>
>> Log Message:
>> Add a comment indicating why this program is installed 0550, as suggested
>> by christos@. The comment reads:
>>
>> 	# This program is set 0550 because, as security(8) states, it has
>> 	# the potential to deplete kernel memory, under certain conditions.
>>
>>
>> To generate a diff of this commit:
>> cvs rdiff -r1.2 -r1.3 src/usr.sbin/paxctl/Makefile
>>
>> Please note that diffs are not public domain; they are subject to the
>> copyright notices on the relevant files.
> 
> i don't think it makes much sense, even as a temporary workaround.

it can't be a workaround because paxctl is not privileged.

-e.