[FreeNX-kNX] freenx and pax enabled ("hardened") kernel?

Alexander Skwar listen at alexander.skwar.name
Sun Apr 16 13:15:52 UTC 2006


Alexander Skwar wrote:

> Well, according to <http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml#paxnoelf>,
> that's because I set in kernel .config: " [*]   Disallow ELF text relocations".
> This can be switched off using the "chpax" utility by doing
> "chpax -m $bin", but for some reason, when I did this against
> nxagent and libXcompext.so.1.5.0, I still cannot login to
> nx.
> 
> Does anyone know how to fix this?

I do now :)

chpax is the wrong tool. With "paxctl -m /usr/NX/bin/nxagent"
(and also "paxctl -m /usr/bin/xmessage"), MPROTECT check can be
disabled. This works very fine!

Alexander Skwar
-- 
Lavish spending can be disastrous.  Don't buy any lavishes for a while.



More information about the FreeNX-kNX mailing list