riz
|
2f0a27492f
|
Make sys/exec_elf.h and machine/elf_machdep.h available to host
tools, and allow paxctl to use them when compiled as a host
tool. This fixes the build on MacOS X (and perhaps other platforms)
|
2006-11-22 15:08:47 +00:00 |
elad
|
a84fee7faf
|
Initial implementation of PaX Segvguard (this is still work-in-progress,
it's just to get it out of my local tree).
|
2006-11-22 02:02:51 +00:00 |
elad
|
45c22579bb
|
Properly handle 32/64bit headers; from christos@.
|
2006-11-20 16:51:44 +00:00 |
christos
|
f1ee5b182f
|
fix flags assignment.
|
2006-11-10 21:39:57 +00:00 |
christos
|
9413d5ca54
|
more portability fixes.
|
2006-11-10 21:35:10 +00:00 |
christos
|
8d5697c533
|
don't include NetBSD specific files.
|
2006-11-10 20:55:37 +00:00 |
christos
|
4dec970d46
|
turn paxctl into a tool. pass lint.
|
2006-11-10 16:31:58 +00:00 |
elad
|
9e399b549b
|
Some mdoc fixes.
|
2006-10-31 01:27:53 +00:00 |
elad
|
9a206be80a
|
Print a message if there are no PaX flags, to be less confusing.
Requested by and okay rpaulo@.
|
2006-09-27 20:01:50 +00:00 |
dogcow
|
5c02c41fc6
|
add missing prototypes
|
2006-05-16 02:37:24 +00:00 |
elad
|
04d63f90b5
|
Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings.
Disabled by default.
First proposed in:
http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html
More information in:
http://pax.grsecurity.net/docs/mprotect.txt
Read relevant parts of options(4) and sysctl(3) before using!
Lots of thanks to the PaX author and Matt Thomas.
|
2006-05-16 00:08:24 +00:00 |