Re: die() required on pax-mark?
Allan Wegan <allanwegan-ORSfXGZZcQqShm5Tz/[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
> When you emerge something with a bazillion files, the install wrapper > (and thus the python interpreter) get launched that many times. It's > the startup time that kills it. Should that PAX markings not only be neccessary for a few hand-selected binaries that refuse to work with secure-by-default settings? I remember setting PAX-markings by hand (a year or so ago) for a few binaries that would else crash with Grsec loglines. I did not had the impression, that there are much of them (that where mostly games, i admit). -- Allan Wegan Jabber: [email protected] ICQ: 209459114
signature.asc
(application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJSZs0iAAoJEMO3lVyIy1Qu5BIP/18V6TFZZI+mq4sYfue3WHuF Wwan/gYqX0spzXFGzYbhSXvdv3yu2eQ+if8hlY0we0q1oF9h0YnYhPgSFYZZKLii tbs6n+eVPizEgnybTa+JMORTkc2R0AsC8WAGjvI9TqE9xFRiC+IMHXnb2s3TdqMT 5OdcW5sEHgy1h2VbKrbI79wGMyAEw7olHDD5/oZm5qLKygghP4Pk5NlJQGVyNUdO jVA5ivPlHFNFU/kZNptv7GbLYe5y9sR2HoqIoHSvv+jqv4AyFdkfBSg14JaXc49x CDcG1iJxUaGwwU2Ox1X1n9UiXLzNZipAxsn8/i3kDXeEH8/PwjxcK1xw+QpTwXyB jUUJStQ6K6y6AqPA18lgjgEz+Nt+aj3MDRBvPCa2MIf/SVxQnpaAWlEMOM0JguWy 9k89gveGfs2xHYqrZCzMe8/IDTEtLpLTsihz4SF9PqKDgU7X0wHpb9z/5p1WBpSx XAcd+nCOUndviegNR42emS9aKIv73dc2Uml0K7QQDbr35WPu09ubPkTNxYQFvBGA uT82MKCVR/Njw0pnD2Il6IcjT9gcWCFAvo+8DPWOUAUvhAmdZ8nN1YHCju2T+Pe/ O9SIdsYWbPg9edG5NuBLtjisb+6FnmLOMdk96AyMUALY9QPijwt5HjCteK6KqClG 911Mm3X0BMy0p/1SXNeq =H0F0 -----END PGP SIGNATURE-----