tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

NOT_PAX_ASLR_SAFE (was: Re: PaX mprotect now on for amd64)

On Sun, May 22, 2016 at 04:44:08PM +0200, Thomas Klausner wrote:
 > > I wrote this mini-framework for paxctl(8) in pkgsrc:
 > > [...]
 > I don't like the variable names, since they do not provide a hint that
 > they are lists of file names, but I don't have a concrete better
 > proposal.

Neither does e.g. REPLACE_PYTHON; we've gotten used to that, but these
are new and will appear much less frequently.

What about



PaX is not the only framework implementing these features and programs
will (in general) be incompatible with any implementation.

(For the same reason I'd say that rather than including this
logic should be put somewhere such that it's available by default.)

(followups to tech-pkg)
David A. Holland

Home | Main Index | Thread Index | Old Index