On 24/10/2007, Adam James <[EMAIL PROTECTED]> wrote:
> On Wed, 24 Oct 2007 17:12:50 +0530
> widyachacra <[EMAIL PROTECTED]> wrote:
>
> > How to enable Enhanced Virus Protection(EVP) on linux?
>
> EVP is a bullshit marketing term for AMDs implementation of the Non
> eXecute (NX) bit.
>
> See http://en.wikipedia.org/wiki/NX_bit#Linux for more information on
> Linux support.

Further, note that Hardened Gentoo is the way to go for full PaX
support. That said, one can use the hardened-sources kernel without
having built a system based upon a hardened stageball and toolchain,
but it's less effective without a PIE userland. For further
information:

http://www.gentoo.org/proj/en/hardened/primer.xml

I'd also like to add that the NX bit is supported by PaX to enforce
W^X memory protection with no overhead but _only_ when running amd64.
On x86 installations, the NX bit is not used by PaX, even if the
processor supports it.

Regards,

--Kerin
-- 
[EMAIL PROTECTED] mailing list

Reply via email to