Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 25 May 2014 22:31:35 +0200
From:      Oliver Pinter <oliver.pntr@gmail.com>
To:        =?ISO-8859-1?Q?Dag=2DErling_Sm=F8rgrav?= <des@des.no>
Cc:        freebsd-security@freebsd.org, freebsd-current@freebsd.org, freebsd-stable@freebsd.org, dim@freebsd.org, Shawn Webb <lattera@gmail.com>
Subject:   Re: [CFT] ASLR, PIE, and segvguard on 11-current and 10-stable
Message-ID:  <CAPjTQNFrkmaXY_TcJBjDa8tUJOY4nPD%2BiPVwk0Z0rpWHK8UeKQ@mail.gmail.com>
In-Reply-To: <86wqd94nk6.fsf@nine.des.no>
References:  <20140514135852.GC3063@pwnie.vrt.sourcefire.com> <CAPjTQNG9pGLbDF7a8b%2B9s_NRD3Rq-sLnj7AXczjB=Ko_S44C3A@mail.gmail.com> <86a9a56ac6.fsf@nine.des.no> <CAPjTQNE6V%2BMAMg4KODVhLckq9p=kpKZPmSK=LEtQkcfZqVi7SA@mail.gmail.com> <86wqd94nk6.fsf@nine.des.no>

next in thread | previous in thread | raw e-mail | index | archive | help
On 5/25/14, Dag-Erling Sm=F8rgrav <des@des.no> wrote:
> Oliver Pinter <oliver.pntr@gmail.com> writes:
>> pax_log will be in future a generic pax related logging framework,
>> with ratelimiting and other features.  It will log user, IP, binary
>> name, path, checksum, and others.
>
> What are you using this for?  Are you sure you can't use ktrace?  It's a
> lot more flexible and powerful than you probably realize.

Logging to system log, The feature will similar to this in grsecurity:
http://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_PaX_Configu=
ration_Options#Kernel_Auditing

>
> DES
> --
> Dag-Erling Sm=F8rgrav - des@des.no
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPjTQNFrkmaXY_TcJBjDa8tUJOY4nPD%2BiPVwk0Z0rpWHK8UeKQ>