file
|
last update
|
comment
|
docs
|
2013.10.02 04:41 GMT
|
H2HC 2013 invited presentation.
H2HC 2012 invited presentation.
LATINOWARE 2012 invited presentation.
SSTIC 2012 keynote.
design & implementation of PaX.
performance impact tests by Pedro Venda.
|
linux 2.2.26
|
2007.08.10 17:55 GMT
|
backport from 2.4 with all features, but only i386 is known to work,
other architectures may not even compile - feedback is welcome.
NOTE: all versions for 2.2 before 2005.03.05 have a privilege
elevation bug, you must update as soon as possible.
|
linux 2.4.37
|
2008.12.27 19:00 GMT
|
new configuration system supporting soft mode and sysctl and a new
(and hopefully final) location for the PaX control flags, you'll need
the binutils patch and paxctl to make use of it.
NOTE: all versions for 2.4 before 2005.03.05 have a privilege
elevation bug, you must update as soon as possible.
|
linux 2.6.32.59
linux 3.2.30
linux 3.6
|
2012.10.02 21:00 GMT
2012.10.02 21:00 GMT
2012.10.02 21:00 GMT
|
forward port from 2.4 with some extra features, but only x86 is known
to work, other architectures may not even compile - feedback is welcome.
much like 2.6 itself, PaX for 2.6 is experimental, anything can break.
NOTE: all versions for 2.6 before 2005.03.05 have a privilege
elevation bug, you must update as soon as possible.
NOTE: all versions for 2.6 before 2004.05.01 have a local kernel denial
of service bug, thanks to ChrisR for
bringing it to our attention.
|
binutils 2.16
|
2005.06.10 22:35 GMT
|
adds PT_PAX_FLAGS program header support to binutils/ld, the old ELF header
marking scheme (EI_PAX) has been deprecated. note that this binutils also has support
for -z relro and -z now, their use is highly encouraged.
Special thanks to Robert Connolly/HLFS
and the Gentoo folks for fixing the testsuites.
NOTE: this version of binutils is known to produce incorrect 2.6 PaX kernels, you should use binutils 2.18 or newer.
|
binutils 2.17
|
2006.07.01 21:30 GMT
|
adds PT_PAX_FLAGS program header support to binutils/ld, the old ELF header
marking scheme (EI_PAX) has been deprecated. note that this binutils also has support
for -z relro and -z now, their use is highly encouraged.
Special thanks to Robert Connolly/HLFS for fixing some of the testsuites.
NOTE: this version of binutils is known to produce incorrect 2.6 PaX kernels, you should use binutils 2.18 or newer.
|
binutils 2.18
|
2008.03.31 14:45 GMT
|
adds PT_PAX_FLAGS program header support to binutils/ld, the old ELF header
marking scheme (EI_PAX) has been deprecated. note that this binutils also has support
for -z relro and -z now, their use is highly encouraged.
Special thanks to Robert Connolly/HLFS for fixing some of the testsuites.
|
binutils 2.19
|
2008.11.04 18:10 GMT
|
adds PT_PAX_FLAGS program header support to binutils/ld, the old ELF header
marking scheme (EI_PAX) has been deprecated. note that this binutils also has support
for -z relro and -z now, their use is highly encouraged.
|
pax-utils
|
2006.05.05 19:30 GMT
|
useful tools for PaX and in general, ELF sanity checking (text relocations, GNU_STACK marking, etc),
brought to you by the Hardened Gentoo folks.
|
paxctl v0.9
|
2014.09.02 19:50 GMT
|
new PaX control program when you use the PT_PAX_FLAGS marking available
in PaX patches after 2004.02.04 (highly recommended). supports alpha, i386,
ia64, mips, mips64, parisc, ppc, ppc64, sparc, sparc64 and x86_64.
|
chpax v0.7
|
2004.06.22 20:00 GMT
|
obsolete version, use it for PaX patches released after 2003.02.03 or if you
want to use the EI_PAX marking in PaX patches released after 2004.02.04.
supports alpha, i386, ia64, mips, mips64, parisc, ppc, ppc64, sparc, sparc64 and x86_64.
|
chpax.old.c
|
2002.12.31 18:35 GMT
|
obsolete version, use it for PaX patches released before 2003.02.03.
|
chpax.sh
chpax.cfg
|
2002.12.12 21:35 GMT
|
this script and its sample configuration contributed by
Markus Gutschke
allow one to keep chpax flags up-to-date when files change.
|
et_dyn.tar.gz
|
2003.08.10 23:55 GMT
|
documentation and example on how to create dynamic ELF executables, this is needed
to achieve full address space layout randomization.
|
paxtest v0.9.5
|
2003.11.04 21:45 GMT
|
PaX regression test suite developed by Peter Busser
for Adamantix.
|
paxtest v0.9.7-pre4
|
2005.06.10 22:45 GMT
|
PaX regression test suite developed by Peter Busser
for Adamantix. This test version attempts to add some
support for the BSDs and also a unified makefile (Makefile.psm), feedback is welcome.
|