Hardened Linux From Scratch - Version SVN-20070501

Chapter 6. Installing Basic System Software

6.59. Paxctl-0.4

The Paxctl package is used to change PaX flags on a per file basis.

6.59.1. Installation of Paxctl

Compile the package: 

make

Install the package: 

make install

There are currently few programs known to need this. Grub uses anonymous mapping and will be killed by PaX. The following command changes Grub's PaX flags: 

paxctl -spm /usr/sbin/grub

localedef uses GCC trampolines code, which works with the CONFIG_PAX_EMUTRAMP PaX kernel option; this is preffered. Alternately you can disable page and segment execution restrictions with paxctl -sp /usr/bin/localedef.

If you find more please let us know.

6.59.2. Contents of Paxctl

Installed programs: Unchecked