Re: RIP hardened-sources

On 29/04/17 18:58, Luis Ressel wrote:
> On Sat, 29 Apr 2017 18:52:56 +0200
> Javier Juan Martinez Cabezon <[email protected]> wrote:
> 
>> It's not one PaX alternative as its only one of its features but rsbac
>> recently implemented native W or X and seems to work fine
> 
> If you're only looking for userland W^X, SELinux has some support for
> that, too (I don't know anything about the internal workings, though).
> But grsec/PaX has quite some interesting features beyond that.
> 
> Regards,
> Luis
> 


I think that if Pipacs want to follow his own way, it's his decision and
we shall respect it.

W or X its implemented in selinux and rsbac, nx gets shipped in recent
systems, but in those computers that haven't nx it couldn't get emulated
without PaX, there are some gcc plugins that emulates some kernel land
PaX features as uderef, vanilla brings some ASLR, maybe not perfect o
weakier buy maybe hardened gentoo could follow this path and could be
coherent with their own way of working, with profiles and specs.