![]() | |||||||||||||
Messages in this thread |
On Wed, 2 Jun 2004, Ingo Molnar wrote: > > If the NX feature is supported by the CPU then the patched kernel turns > on NX and it will enforce userspace executability constraints such as a > no-exec stack and no-exec mmap and data areas. This means less chance > for stack overflows and buffer-overflows to cause exploits. Just out of interest - how many legacy apps are broken by this? I assume it's a non-zero number, but wouldn't mind to be happily surprised. And do we have some way of on a per-process basis say "avoid NX because this old version of Oracle/flash/whatever-binary-thing doesn't run with it"? Linus - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-03-22 14:03 [from the cache] ©2003-2008 | |||||||||||||