Messages in this thread | | | Date | Fri, 4 Jun 2004 18:37:54 +0200 | From | Arjan van de Ven <> | Subject | Re: [announce] [patch] NX (No eXecute) support for x86, 2.6.7-rc2-bk2 |
| |
On Fri, Jun 04, 2004 at 06:13:04PM +0200, Andi Kleen wrote: > > So instead of having complex things to try to turn NX on for suid, we > > should aim to turn ot on as widely as possible, _even_if_ that means that > > people who upgrade hardware might have to do some trivial MIS stuff. > > That is what is currently done on x86-64 in the major distributions > (SUSE,Red Hat) at least.
yep.
> Of course that is only for the stack. Making the heap non executable > is another can of worms. I don't know if Fedora does that > too, SUSE and mainline x86-64 doesn't.
Fedora makes the heap non executable too; it only broke X which has it's own shared library loader (which btw had all the right mprotects in place, just ifdef'd for freebsd, ia64 and a few other architectures that default to non-executable heap, so we just added x86(-64) to that)
Greetings, Arjan van de Ven [unhandled content-type:application/pgp-signature] | |