pageexec on via c7

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

pageexec on via c7

Postby yiannis » Sat Feb 02, 2008 8:44 am

Hello,

I am setting up a new pc based on via's c7 32bit processor which has the nx bit enabled(checked through cat /proc/cpuinfo). Is it possible for this to use pageexec? I have read that it is only enabled on 64bit platforms as they are(as it seems were) the only having the nx bit. If it is not possible, are there plans on supporting it?

Best regards

Yiannis
yiannis
 
Posts: 1
Joined: Sat Feb 02, 2008 8:38 am

Re: pageexec on via c7

Postby Alexei.Sheplyakov » Sat Feb 02, 2008 10:28 am

yiannis wrote:I am setting up a new pc based on via's c7 32bit processor which has the nx
bit enabled(checked through cat /proc/cpuinfo). Is it possible for this to use
pageexec? I have read that it is only enabled on 64bit platforms as they
are(as it seems were) the only having the nx bit.


AFAIK PaX makes use of "nx bit" even when running in 32-bit mode, as long
as you have PAE enabled (CONFIG_HIGHMEM64G=y). That said, I've checked this
only for AMD and Intel CPUs. So, build your kernel with CONFIG_HIGHMEM64G=y,
and use paxtest to check if pageexec actually works.

Good luck,

Alexei
Alexei.Sheplyakov
 
Posts: 53
Joined: Sun Feb 19, 2006 11:48 am

Re: pageexec on via c7

Postby Thrawn » Wed Feb 06, 2008 3:02 pm

I also think so.
Pax team - are we right? Does Pax use the nx bit if pae is enabled???
Thrawn
 
Posts: 35
Joined: Wed Nov 23, 2005 9:54 am

Re: pageexec on via c7

Postby PaX Team » Wed Feb 06, 2008 4:52 pm

Thrawn wrote:I also think so.
Pax team - are we right? Does Pax use the nx bit if pae is enabled???
yes, there's even a hint at it in the .config help ;-).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support