[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#605090: linux-grsec testing



On dim., 2015-12-20 at 00:32 +0000, bancfc@openmailbox.org wrote:
> Hi. After testing the kernel X doesn't boot because restrict mprotect is 
> enabled.


Hi,

it's most likely because you're using nvidia/nouveau or amd/radeon graphic
card, and the userland driver uses LLVMpipe which in turns uses JIT code. I
don't have the issue with my intel graphic card.

>  Are there plans to integrate a PaX exception list so mprotect 
> can be enabled system wide while common software can still work?

I don't have any, I'm mostly interested in the kernel part right now. Also the
exceptions are really system-specific, and you don't want them if you don't
really need them.

Regards,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: