Bill Page wrote:
>
> Running Axiom on the AxiomWiki VM requires that
>
> # echo 0 >/proc/sys/kernel/randomize_va_space
>
> See: http://www.axiom-developer.org/axiom-website/download.html
>
> Do you have any objection to running the VM with this option disabled?
Currently turning off address space randomization would have
small effect on security of VM. But:
- I would like increasing security in the future and then it
will make bigger difference.
- I must admit that I recomendation to turn off address space
randomization strongly puts me off -- it was necessary in
old gcl version, but now gcl works fine with address space
randomization on. More precisely, gcl contains code which
turns off address space randomization just for executables
run on top of gcl (that is for AXIOMsys). The 'echo' command
above affects whole system (all processes in VM) and what
happens to other processes should not matter to AXIOMsys
at all. I compile FriCAS on system with address space
randomization on using gcl and it works fine.
- Have you tried if address space randomization make any
difference for Tim's Axiom? Tim keeps repeating this
reccomendation, but when I looked at problem reports of
Axiom users in the last few years they always wrote that
it made no difference.
- I have found that rather small change in the system break
gcl build executables. In four years I once updated libc
and two or three times other libraries. Each time I had
to recompile gcl and then binaries built by gcl. Simply,
gcl test for some properties of system and hardcodes
them in binaries. If they change too much binaries get
broken. If you try using binaries this is more likely to
be a problem.
--
Waldek Hebisch
[email protected]
--
You received this message because you are subscribed to the Google Groups
"FriCAS - computer algebra system" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/fricas-devel?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
