Re: [gentoo-hardened] 'paxctl -m bin' everything that complains?

[RB <aoz.syn@gmail.com>]

On Thu, Jan 22, 2009 at 20:07, Grant <emailgrant@gmail.com> wrote:
> It turns out I need to issue 'paxctl -m
> /usr/lib64/mozilla-firefox/firefox' to prevent firefox from crashing
> when watching a cnn.com video.  Is that a huge security issue?

That's up to you.  In running X and firefox, you've probably made
enough compromises that one more isn't going to make that much more of
a difference.  That said, execution protections (like MPROTECT) are
probably some of the more critical ones you're going to have, due to
the way most malware works, and turning them off on a browser is
probably unwise.

Security is always a balance of control & usability, choose yours and
live with it.