From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-hardened+bounces-2403-garchives=archives.gentoo.org@lists.gentoo.org>) id 1LQPGe-0002fQ-6e for garchives@archives.gentoo.org; Fri, 23 Jan 2009 16:52:28 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C9A7FE0963; Fri, 23 Jan 2009 16:52:04 +0000 (UTC) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.152]) by pigeon.gentoo.org (Postfix) with ESMTP id 784E4E0963 for <gentoo-hardened@lists.gentoo.org>; Fri, 23 Jan 2009 16:52:04 +0000 (UTC) Received: by fg-out-1718.google.com with SMTP id e21so2651760fga.14 for <gentoo-hardened@lists.gentoo.org>; Fri, 23 Jan 2009 08:52:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=l5KrKsKdxweiReC8CKCRz70KdJNuP6V43C+4w1eBreI=; b=U6TH3C3bvXPOH7EeCCfC//N8BhyeujCBTZWAoOK1A5ELp1CBmTJCjdrfLHpPE5x2Us xRZmWeyZqmGR3876A5g8jmQejJxuMi5vMH59O1wkeRjjrKvl/R8bQUtxQ7kj4POFSjx3 hQ2wsHHYSzL6n0HJTU9eplSJ5Nwmq+ahk3yOE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=kovMootTFyf6RivIsamKSNYrTzJ7kvr37Z9hnQ35Dtv1gVZHblfmrsbzFQyAHb+Re9 PxcWW8RKCKZMqGGCG9thHT74ZztRyKNFrKzOCqNlCJFFrhVpgiVCQy4zJ713LAmQpQBM 1DNg92feOrnMTa+ZIBVM93zjK1cUx2o/sUN98= Precedence: bulk List-Post: <mailto:gentoo-hardened@lists.gentoo.org> List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org> X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Received: by 10.223.108.15 with SMTP id d15mr1500509fap.105.1232729523790; Fri, 23 Jan 2009 08:52:03 -0800 (PST) In-Reply-To: <49bf44f10901230845u4c34d6c7ia546fcda81542661@mail.gmail.com> References: <49bf44f10901222037x6efccacbqd428e5e7be0899f6@mail.gmail.com> <497985F1.25065.4B5BFE@pageexec.freemail.hu> <49bf44f10901230610y54cf1a67q76fddf7ee5dc19de@mail.gmail.com> <4979DECC.6678.1A67431@pageexec.freemail.hu> <49bf44f10901230845u4c34d6c7ia546fcda81542661@mail.gmail.com> Date: Fri, 23 Jan 2009 11:52:03 -0500 Message-ID: <35572ca80901230852g16362bc1q76697e4a6638033f@mail.gmail.com> Subject: Re: [gentoo-hardened] Grsecurity slows down a web server? From: =?ISO-8859-1?B?UmVu6SBSaOlhdW1l?= <rene.rheaume@gmail.com> To: gentoo-hardened@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: c58602a0-e835-448d-81e7-0e41c9496770 X-Archives-Hash: aa0a3a52a1694176b3d9fc7d47f0f43c On Fri, Jan 23, 2009 at 11:45 AM, Grant <emailgrant@gmail.com> wrote: > Very close. PAGEEXEC is enabled, but so is SEGMEXEC. My CPU is a > P4-2.8, and I'm not sure about NX support but these are the flags: > > fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 > clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe constant_tsc pebs bts > pni monitor ds_cpl cid xtpr There is no "nx" in your cpuinfo flags. Therefore, your P4 does not have the hardware NX bit (or XD bit in Intel wording)