Re: denied RWX mmap by layman

Michael Orlitzky <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
On 06/07/2014 08:55 PM, Anthony G. Basile wrote:
> 
> When running with a pax kernel, you must enable EMUTRAMP in your Kconfig 
> and you must paxmark your python exe's with E.  Note: EMUTRAMP is on by 
> default and the ebuild automatically does the markings for you, so leave 
> the defaults alone.
> 

Can linux-info.eclass be used to spit out a warning during a python emerge?

This,

  use hardened && CONFIG_CHECK+=" ~CONFIG_PAX_EMUTRAMP"

seems like a common pattern. With a little more ingenuity we can
probably have it check the running/installed kernel and not the USE flag.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.