PAX_PAGEEXEC on ARM

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

PAX_PAGEEXEC on ARM

Postby metarox » Wed May 20, 2015 12:07 pm

The Kconfig for PAX_PAGEEXEC doesn't have a dependency on ARM, but there are changes in the arch/arm tree.

Is it supported or is something else missing?
metarox
 
Posts: 9
Joined: Thu Mar 19, 2015 2:20 pm

Re: PAX_PAGEEXEC on ARM

Postby PaX Team » Wed May 20, 2015 3:05 pm

it's an implicit dependency, PAX_PAGEEXEC depends on PAX_NOEXEC which in turn depends on all the archs where it's supported.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: PAX_PAGEEXEC on ARM

Postby lynliuyan » Wed Jun 03, 2015 11:13 pm

PaX Team wrote:it's an implicit dependency, PAX_PAGEEXEC depends on PAX_NOEXEC which in turn depends on all the archs where it's supported.


also supported on powerpc?How to test?I found pax_handle_fetch_fault did not do anything
lynliuyan
 
Posts: 18
Joined: Wed Mar 04, 2015 11:47 pm

Re: PAX_PAGEEXEC on ARM

Postby PaX Team » Fri Jun 05, 2015 8:53 am

yes, PAGEEXEC works on ppc too, i think paxtest will at least trigger the non-exec violations (you can check it in dmesg). pax_handle_fetch_fault is a stub function that would handle various insn emulations (gcc trampolines, etc) but i never had the time or interest to do it myself.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support