Exec-shield and memory randomization

Arjan van de Ven arjanv at redhat.com
Mon Aug 1 05:48:48 UTC 2005


On Sun, Jul 31, 2005 at 04:27:16PM -0700, Dave Roberts wrote:
> On Sun, 2005-07-31 at 19:46 +0200, Arjan van de Ven wrote:
> > > . That it, they seem independent, but most of the
> > > documentation on exec-shield I have seen seems to suggest that turning
> > > off exec-shield should turn off just about everything and leave you with
> > > a pretty standard system, ala the pre-exec-shield days. Is that no
> > > longer true?
> > 
> > well.. randomisation is now merged upstream....
> 
> I'm not sure I understand. So that means "yes, they are now
> independent" ?
> 
> So assuming that's the case, what does the kernel look for in
> determining whether to turn of randomization on a per-binary basis?

Nowhere.. it's on for everything. The theory is that randomisation doesn't
do anything "odd" at all that couldn't happen otherwise. (by for example
upgrading a few libraries or so)
So I'd like to get to the bottom of why this app is breaking




More information about the fedora-devel-list mailing list