Commit Graph

11 Commits

Author SHA1 Message Date
riz
2f0a27492f Make sys/exec_elf.h and machine/elf_machdep.h available to host
tools, and allow paxctl to use them when compiled as a host
tool.  This fixes the build on MacOS X (and perhaps other platforms)
2006-11-22 15:08:47 +00:00
elad
a84fee7faf Initial implementation of PaX Segvguard (this is still work-in-progress,
it's just to get it out of my local tree).
2006-11-22 02:02:51 +00:00
elad
45c22579bb Properly handle 32/64bit headers; from christos@. 2006-11-20 16:51:44 +00:00
christos
f1ee5b182f fix flags assignment. 2006-11-10 21:39:57 +00:00
christos
9413d5ca54 more portability fixes. 2006-11-10 21:35:10 +00:00
christos
8d5697c533 don't include NetBSD specific files. 2006-11-10 20:55:37 +00:00
christos
4dec970d46 turn paxctl into a tool. pass lint. 2006-11-10 16:31:58 +00:00
elad
9e399b549b Some mdoc fixes. 2006-10-31 01:27:53 +00:00
elad
9a206be80a Print a message if there are no PaX flags, to be less confusing.
Requested by and okay rpaulo@.
2006-09-27 20:01:50 +00:00
dogcow
5c02c41fc6 add missing prototypes 2006-05-16 02:37:24 +00:00
elad
04d63f90b5 Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings.

Disabled by default.

First proposed in:

	http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html

More information in:

	http://pax.grsecurity.net/docs/mprotect.txt

Read relevant parts of options(4) and sysctl(3) before using!

Lots of thanks to the PaX author and Matt Thomas.
2006-05-16 00:08:24 +00:00