From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
by finch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-hardened+bounces-2406-garchives=archives.gentoo.org@lists.gentoo.org>)
id 1LQPf3-0005FN-LS
for garchives@archives.gentoo.org; Fri, 23 Jan 2009 17:17:41 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id CCAAFE0975;
Fri, 23 Jan 2009 17:16:07 +0000 (UTC)
Received: from fk-out-0910.google.com (fk-out-0910.google.com [209.85.128.190])
by pigeon.gentoo.org (Postfix) with ESMTP id 8AE8AE0975
for <gentoo-hardened@lists.gentoo.org>; Fri, 23 Jan 2009 17:16:07 +0000 (UTC)
Received: by fk-out-0910.google.com with SMTP id z23so1406560fkz.2
for <gentoo-hardened@lists.gentoo.org>; Fri, 23 Jan 2009 09:16:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:in-reply-to:references
:date:message-id:subject:from:to:content-type
:content-transfer-encoding;
bh=SATgnaQsMd7IBVGjt7fwWeUaEt0Dt9HZF+VeunVmRSs=;
b=E1vk74AZMklnLmDmooef212Rb9yjjpVY23U/HJAjlmptncfFRrjYAZ5UnPMuzz3ywr
d01MrSAA+iaLc1KeC4uigpO6EUvs4ev4Tktrvub6rYxJbC3WYVGMU+75Ymi2xijKA7Fd
qvOlQUzkyGNGGzMdgtb7JUnz0j+3ht2djdHdw=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type:content-transfer-encoding;
b=In1RCRfe184fzbR7lMUZsF73lb119UH2UM7OUZ0GxnoaW+kkWamsNW1iRQvtCBmmUC
+SjeYOJIaOQI5GtJAN13v/zACTZqoceCOhDQhEKoKGmbo/o3daWAadr/ye8U/Cdy7UjY
ff25RONHhaTwjCe6efdiEDh+3ETclZ1s5c+g8=
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.181.150.16 with SMTP id c16mr1381490bko.150.1232730966864;
Fri, 23 Jan 2009 09:16:06 -0800 (PST)
In-Reply-To: <35572ca80901230852g16362bc1q76697e4a6638033f@mail.gmail.com>
References: <49bf44f10901222037x6efccacbqd428e5e7be0899f6@mail.gmail.com>
<497985F1.25065.4B5BFE@pageexec.freemail.hu>
<49bf44f10901230610y54cf1a67q76fddf7ee5dc19de@mail.gmail.com>
<4979DECC.6678.1A67431@pageexec.freemail.hu>
<49bf44f10901230845u4c34d6c7ia546fcda81542661@mail.gmail.com>
<35572ca80901230852g16362bc1q76697e4a6638033f@mail.gmail.com>
Date: Fri, 23 Jan 2009 09:16:06 -0800
Message-ID: <49bf44f10901230916m7653bc48q451575a4a07e8e86@mail.gmail.com>
Subject: Re: [gentoo-hardened] Grsecurity slows down a web server?
From: Grant <emailgrant@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 12588491-9e10-429e-9346-2ca2b70e8020
X-Archives-Hash: 75d31b60083f57554ae6e6104e80468d
>> Very close. PAGEEXEC is enabled, but so is SEGMEXEC. My CPU is a
>> P4-2.8, and I'm not sure about NX support but these are the flags:
>>
>> fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36
>> clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe constant_tsc pebs bts
>> pni monitor ds_cpl cid xtpr
>
> There is no "nx" in your cpuinfo flags. Therefore, your P4 does not
> have the hardware NX bit (or XD bit in Intel wording)
I do have SEGMEXEC enabled though. Should it still be noticeably (but
slightly) slower? If so, I suppose the best thing to do would be to
upgrade the CPU?
- Grant