Re: pidgin & nvidia-drivers-355.11
Alex Efros <[email protected]> Sat, 19 Sep 2015 22:40:29 +0300
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Organization | http://powerman.name/ |
| Message-ID | <[email protected]> |
Hi! On Sat, Sep 19, 2015 at 09:33:15PM +0200, PaX Team wrote: > > > 1. enable ELFRELOCS in your kernel config (and keep MPROTECT enforced > > > on all binaries) > > Done. This works. I don't really like it, but let it be, at least for now. > well, disabling MPROTECT is much worse, this way you can at least > control which binaries can map libaries with textrels. I don't get it. With MPROTECT I control which binaries won't be protected. With ELFRELOCS I don't control binaries and all of them will be less protected. And I doubt "all less protected" is better than "few not protected". -- WBR, Alex.