oXA mode in debian_secure_acls/apache

[hardigunawan]

Hi,

As above, today I downloaded gradm from cvs and saw that the subject mode for apache inside the debian_secure_acls is set to oXA. Searching the docs, I can't find definition on X and A. Is it a new type?

[spender]

X means to enable the RANDEXEC feature of PaX on the binary
A means to protect the shared memory of the process...only apache will be able to attach to it

-Brad