grsecurity forums

Sorry, after having tried to get it working for some hours, I'm somewhat clueless:
paxctl seem to do nothing on my systen, no matter what options I use:

# paxctl -RX randheap1
#

returns withou error, but

# paxctl -v randheap1
PaX control v0.2
Copyright 2004 PaX Team <pageexec@freemail.hu>

#

prints no flags. If I compare the binary with the saved old version, diff also finds no differences.
I also patched the binutils (although I did nor really realize, why this is needed to just set the
flags (?)), but still nothing happens.

Sorry if I missed something stupid, but I don't have any more ideas...

Pkunk

pkunk wrote:# paxctl -v randheap1
PaX control v0.2
Copyright 2004 PaX Team <pageexec@freemail.hu>

#

prints no flags. If I compare the binary with the saved old version, diff also finds no differences.

this means that randheap1 doesn't have the PT_PAX_FLAGS program header which in turn means that you didn't have a patched binutils when you compiled/linked randheap1. try readelf -l randheap1 for a confirmation.

I also patched the binutils (although I did nor really realize, why this is needed to just set the
flags (?)), but still nothing happens.

the patched binutils is needed to have ld emit the PaX specific PT_PAX_FLAGS program header and if as you say you have the patched binutils, you didn't recompile randheap1 (paxtest in general, i guess).