Execution Disable flag for JDK
binaries on AIX - was : AIX : -bnorwexec linker flag
Hi Matthias,
the change looks good to me.
According to an old redbook [1], this flag makes stacks and r/w sections of the
lib non-executable. This makes sense.
Best regards,
Martin
[1] AIX 5L Differences Guide
223307: enable the Stack Execution Disable flag for JDK
binaries on AIX - was : AIX : -bnorwexec linker flag
Change looks good from a build perspective. I can't comment on the
validity of the flag itself for a platform I don't know.
/Erik
On 2019-05-03 05:48, Baesken, Matthias wrote:
>
Change looks good from a build perspective. I can't comment on the
validity of the flag itself for a platform I don't know.
/Erik
On 2019-05-03 05:48, Baesken, Matthias wrote:
Hello, I created a webrev for the previously discussed issue (AIX : -bnorwexec
linker flag).
AIX supports a binary
Hello, I created a webrev for the previously discussed issue (AIX : -bnorwexec
linker flag).
AIX supports a binary hardening option called SED, see :
https://www.ibm.com/support/knowledgecenter/en/ssw_aix_71/com.ibm.aix.security/stack_exec_disable.htm
System wide configuration can be done
.net%2f>
De : Baesken, Matthias
Envoyé : lundi 15 avril 2019 16:47:18
À : REIX, Tony; ppc-aix-port-...@openjdk.java.net; 'build-dev@openjdk.java.net'
Objet : RE: AIX : -bnorwexec linker flag
Hi Tony, agree the -bexpall is not good .
Do you have a good (/ better
16:18
To: Baesken, Matthias ;
ppc-aix-port-...@openjdk.java.net; 'build-dev@openjdk.java.net'
Subject: RE: AIX : -bnorwexec linker flag
Hi
Maybe that the patch is good, but the original code, though working fine, is
bad.
--- a/make/autoconf/flags-ldflags.m4
-BASIC_LDFLAGS="
Hi
Maybe that the patch is good, but the original code, though working fine, is
bad.
--- a/make/autoconf/flags-ldflags.m4
-BASIC_LDFLAGS="-b64 -brtl -bnolibpath -bexpall -bernotok -btextpsize:64K \
On AIX, using -brtl and -bexpall is OK for fixing issues quick and dirty.
However,
penjdk.java.net>
> Subject: Re: AIX : -bnorwexec linker flag
>
> From a build point of view, the patch looks good. I cannot comment on
> the validity of adding the flag though.
>
> /Erik
>
> On 2019-04-12 02:15, Baesken, Matthias wrote:
> > Hello, I have a que
From a build point of view, the patch looks good. I cannot comment on
the validity of adding the flag though.
/Erik
On 2019-04-12 02:15, Baesken, Matthias wrote:
Hello, I have a question regarding the AIX -bnorwexec linker flag .
I think it is related to an AIX security feature SED , see
Hello, I have a question regarding the AIX -bnorwexec linker flag .
I think it is related to an AIX security feature SED , see also :
https://www.ibm.com/support/knowledgecenter/en/ssw_aix_71/com.ibm.aix.security/stack_exec_disable_flags.htm
When building with the additional -bnorwexec
10 matches
Mail list logo
