Re: [CFT] ASLR, PIE, and segvguard on 11-current and 10-stable

From: David Chisnall <theraven_at_FreeBSD.org>
Date: Sun, 25 May 2014 22:18:19 +0100
On 25 May 2014, at 21:31, Oliver Pinter <oliver.pntr_at_gmail.com> wrote:

> On 5/25/14, Dag-Erling Smørgrav <des_at_des.no> wrote:
>> Oliver Pinter <oliver.pntr_at_gmail.com> writes:
>>> pax_log will be in future a generic pax related logging framework,
>>> with ratelimiting and other features.  It will log user, IP, binary
>>> name, path, checksum, and others.
>> 
>> What are you using this for?  Are you sure you can't use ktrace?  It's a
>> lot more flexible and powerful than you probably realize.
> 
> Logging to system log, The feature will similar to this in grsecurity:
> http://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_PaX_Configuration_Options#Kernel_Auditing

It sounds like you actually want to be writing audit events then.  See audit(4).

David
Received on Sun May 25 2014 - 19:18:32 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:49 UTC