storm wrote:Just curious what the current status is of using grsec + vmware together (grsec on host and/or guest)...
as far as PaX is concerned, everything should work with vmx/svm on the guest side (but binary translation won't like UDEREF), on the host side i can't tell as recent vmware versions die here with some malloc corruption detected by glibc (probably due to mixing different versions of libraries in the same process) but in theory everything should work on amd64, and probably KERNEXEC won't work on i386. if anyone can try and let me know what happens, i can look into any remaining failures.