Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Donnie Berkholz
On 05:16 Fri 02 Dec , Duncan wrote: TL;DR: reiserfs (v3), for both caps and XT_PAX ?? A bit OT, but I find it incredibly ironic that perhaps the shortest email you've ever written contained a TL;DR segment. -- Thanks, Donnie Donnie Berkholz Council Member / Sr. Developer Gentoo Linux

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Mike Frysinger
On Friday 02 December 2011 00:16:43 Duncan wrote: Longer: Does reiserfs (v3) support xattrs and thus, presumably caps and XT_PAX? Kernel reiserfs options suggest yes, but everything I've read elsewhere (including gentoo-dev caps project discussions) seems to indicate no. Is the no simply

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Donnie Berkholz posted on Wed, 07 Dec 2011 15:47:01 -0500 as excerpted: On 05:16 Fri 02 Dec , Duncan wrote: TL;DR: reiserfs (v3), for both caps and XT_PAX ?? A bit OT, but I find it incredibly ironic that perhaps the shortest email you've ever written contained a TL;DR segment. =;^)

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Anthony G. Basile
On 12/07/2011 05:10 PM, Mike Frysinger wrote: On Friday 02 December 2011 00:16:43 Duncan wrote: Longer: Does reiserfs (v3) support xattrs and thus, presumably caps and XT_PAX? Kernel reiserfs options suggest yes, but everything I've read elsewhere (including gentoo-dev caps project

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Mike Frysinger posted on Wed, 07 Dec 2011 17:10:01 -0500 as excerpted: while i've never tested xattrs on reiserfs (as alluded earlier, i've dropped all my reiserfs usage in favor of ext4), but i know tmpfs works (once you've enabled it in the kernel). Thanks. FWIW: (1) Tail-packing. (2)

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Anthony G. Basile posted on Wed, 07 Dec 2011 20:03:22 -0500 as excerpted: I just tested with reiser3 and xattr works just fine. Just make sure its enabled in the kernel and when you mount the fs use option user_xattr for the user. namespace. Thanks. -- Duncan - List replies preferred. No

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Mike Frysinger
On Wednesday 07 December 2011 20:45:28 Duncan wrote: (1) Tail-packing. ext4 will be doing something similar: http://lwn.net/Articles/469805/ although i don't find the overhead w/out tail packing to be a deal breaker (3) The kernel folks don't screw with it as much as they do ext*.

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Rich Freeman
On Wed, Dec 7, 2011 at 8:58 PM, Mike Frysinger vap...@gentoo.org wrote: i have no sympathy for broken userspace code I define broken userspace code as anything that uses fsync except for transactional synchronization with external sources. My system is a bit beefier now, but one of the biggest

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Mike Frysinger posted on Wed, 07 Dec 2011 20:58:15 -0500 as excerpted: On Wednesday 07 December 2011 20:45:28 Duncan wrote: (1) Tail-packing. ext4 will be doing something similar: http://lwn.net/Articles/469805/ Thanks. I was ~3 months behind on LWN for awhile but am down to 4 weeks

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-01 Thread Duncan
Anthony G. Basile posted on Thu, 01 Dec 2011 11:08:37 -0500 as excerpted: I've been doing some experimental work with PaX enabled kernels The disadvantage is that xattrs is not supported on all filesystems b) Kernels 3.0 and above support xattrs in tmpfs, squashfs and other filesystems. [I