Re: Question about ASLR

"PaX Team" <[email protected]> Mon, 07 Sep 2015 17:21:03 +0200
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
On 7 Sep 2015 at 11:06, René Rhéaume wrote:

> 2015-09-07 10:41 GMT-04:00 PaX Team <[email protected]>:
> > i wouldn't call it magic but PaX used to provide RANDEXEC:
> >
> >   https://pax.grsecurity.net/docs/randexec.txt
> 
> Is RANDEXEC abandoned because it could not be ported to other architectures?

no, portability isn't a concern in general (if it were, we'd have removed
half the features already ;). rather, the underlying code was too complex
to maintain after a while (IIRC, it's become much harder with the 2.6 kernel
series) and the benefits weren't enough to justify the costs (e.g., false
positives, performance impact).