grsecurity forums

Hello,
Besides "paxctl --help", or "man paxctl" is there any specific documentation on how to set up Tomcat v5.0 or a Java env in a grsec modified kernel?

What flags do you use with paxctl to allow Tomcat to run? We're using the mod_jk, bridge for Apache.

Tomcat is using Catalina, but when you run it, ps-al just shows "java" as the process owner.


Thank-you,
--M

pac_red wrote:What flags do you use with paxctl to allow Tomcat to run? We're using the mod_jk, bridge for Apache.

paxctl -spmr, or more likely, chpax -spmr (i doubt your java binaries have a PT_PAX_FLAGS program header, this means that you'll need EI_PAX support in your kernel of course).