Warning: file_exists(): open_basedir restriction in effect. File(/srv/http/vhosts/aur.archlinux.org/public/web/locale//en/LC_MESSAGES/aurweb.mo) is not within the allowed path(s): (/srv/http/vhosts/aur-dev.archlinux.org/:/etc/aurweb/) in /srv/http/vhosts/aur-dev.archlinux.org/public/web/lib/streams.php on line 90
AUR (en) - linux-pax-flags

Notice: Undefined variable: name in /srv/http/vhosts/aur-dev.archlinux.org/public/web/lib/pkgfuncs.inc.php on line 248

Package Details: linux-pax-flags 2.0.18-4

Git Clone URL: https://aur-dev.archlinux.org/linux-pax-flags.git (read-only)
Package Base: linux-pax-flags
Description: Deactivates PaX flags for several binaries to work with PaX enabled kernels.
Upstream URL: https://github.com/nning/linux-pax-flags
Keywords: grsecurity linux pax security
Licenses: GPL3
Submitter: phects
Maintainer: phects
Last Packager: phects
Votes: 18
Popularity: 0.000872
First Submitted: 2012-01-12 18:16
Last Updated: 2015-12-15 12:27

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 7 8 9 10 11 ... Next › Last »

phects commented on 2013-02-22 08:29

The package is not on github, because I operate my own git server since some time and can not really part with it. The repositories URL is "git://git.orgizm.net/linux-pax-flags.git".

Why do you want to rewrite linux-pax-flags? I started in bash and came to the conclusion, that integrating advanced features (like configuration overrides, e.g.) is way to painful with shellscripting. (I thought about using Python for a rewrite, but learning the language not really fascinated me, so I used Ruby.)

I thought of at least seperating the PKGBUILD from the code in the near future. The idea of a website for collecting flags is very good, but I do not think, we need it right now, because there were not that many flag reportings, yet.

An Hardened Arch Linux project or community would be a good starting point for raising our efforts, I think.

Do we maybe want to discuss this further in the bbs?

echoblack commented on 2013-02-22 02:29

Is this package on GitHub or something? I would like to rewrite the front end in Bash. However, I don't want to maintain my own list of programs and the pax-flags they need; nor would it be a good idea for me to do that.

You know what I think would be really cool. Is if I like made a website all about hosting a repository of .conf files for PaX flags. Like make it easy for people to upload new flags and comment on flags... maybe email up-stream notifying them of improper memory usage, so someone can fix it upstream.... I need flesh out that idea.

Then end result is that anyone on any distro could write the equivalent of your linux-pax-flags program and/or modify their package manager to auto-set pax-flags.

phects commented on 2013-02-19 22:16

2.0.6-3:

MPROTECT off for Steam games:
- Anomaly: Warzone Earth
- Bastion
- Closure
- Darwinia
- Rochard
- Shank 2
- The Book Of Unwritten Tales
- Zen Bound 2

Added linux-pax-flags(8) man page.

Possibility to skip flags for certain paths via config in /etc/pax-flags.

Better config for adb.

phects commented on 2013-02-13 23:42

2.0.3: MPROTECT off for kscreenlocker_greet, own config file for KDE.

+ /usr/lib/kde4/libexec/kscreenlocker_greet

phects commented on 2013-02-13 23:42

2.0.2: Better handling of MPROTECT off for ruby.

+ ~/.rvm/rubies/ruby-1.9.3-p*/bin/ruby
+ /usr/bin/ruby

duncant commented on 2013-02-13 19:17

/usr/lib/kde4/libexec/kscreenlocker_greet needs MPROTECT off, otherwise KDE freezes when resuming from sleep.

phects commented on 2013-02-08 14:38

I uploaded the in Ruby rewritten tool as 2.0.1-1.

phects commented on 2013-01-22 09:29

1.0.31-8: MPROTECT off for Dolphin Emulator, Rochard, The Journey Down, Torchlight and VLC.

+ ~/Steam/SteamApps/common/The Journey Down/JourneyDown1
+ /opt/Rochard/Rochard
+ /opt/Torchlight/Torchlight.bin.x86*
+ /usr/bin/dolphin-emu
+ /usr/bin/vlc

phects commented on 2013-01-16 13:47

1.0.31-7: MPROTECT off for Dolphin Emulator, Rochard, The Journey Down and Torchlight.

+ /opt/Rochard/Rochard
+ ~/Steam/SteamApps/common/The Journey Down/JourneyDown1
+ /opt/Torchlight/Torchlight.bin.x86*
+ /usr/bin/dolphin-emu

phects commented on 2013-01-12 23:45

1.0.31-6: MPROTECT off for Rochard, The Journey Down and Torchlight.

+ /opt/Rochard/Rochard
+ ~/Steam/SteamApps/common/The Journey Down/JourneyDown1
+ /opt/Torchlight/Torchlight.bin.x86*