From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
by finch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-hardened+bounces-2410-garchives=archives.gentoo.org@lists.gentoo.org>)
id 1LQQXm-0003RE-6q
for garchives@archives.gentoo.org; Fri, 23 Jan 2009 18:14:14 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id 0D367E0662;
Fri, 23 Jan 2009 18:14:12 +0000 (UTC)
Received: from mail-fx0-f20.google.com (mail-fx0-f20.google.com [209.85.220.20])
by pigeon.gentoo.org (Postfix) with ESMTP id C3DA1E0662
for <gentoo-hardened@lists.gentoo.org>; Fri, 23 Jan 2009 18:14:11 +0000 (UTC)
Received: by fxm13 with SMTP id 13so1111246fxm.10
for <gentoo-hardened@lists.gentoo.org>; Fri, 23 Jan 2009 10:14:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:in-reply-to:references
:date:message-id:subject:from:to:content-type
:content-transfer-encoding;
bh=evpArnuPAgrLklHUaNV0c5cyzbvLDGPlUA9a7mxU99A=;
b=tez8VZzSxfsRQODCitict8DKV9t9ut7rjhFV27VHsnOf4jZkvW1vqnGNZrvah4oyOe
779w24xNiYryOxqNjev8+wd+HJGWBglCmYxgt276qgnwH8TI+odIEYevHUDjQ5cXzOyR
67AHuvu7AxtyrP6FE+f515uiQG2BPngdpWe0Y=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type:content-transfer-encoding;
b=QbmF0gKMFZTuX51Nw0NPx0ouWZ1aCYrzYYFGsVEwlYQhTpLfFozvhPqC0okaUNgdxW
jodulhgOuQzk/bR1RJgR8YeteiLapyi35eq6SSG//A3TQ+ZjgBfluncJ42TKwE98QQm1
KYJin5Flot0m9KdRTcBoWN6c8s626hg20HZ0U=
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.181.235.14 with SMTP id m14mr2106786bkr.28.1232734451133; Fri,
23 Jan 2009 10:14:11 -0800 (PST)
In-Reply-To: <1232733787.25551.6.camel@hangover>
References: <49bf44f10901222037x6efccacbqd428e5e7be0899f6@mail.gmail.com>
<497985F1.25065.4B5BFE@pageexec.freemail.hu>
<49bf44f10901230610y54cf1a67q76fddf7ee5dc19de@mail.gmail.com>
<4979DECC.6678.1A67431@pageexec.freemail.hu>
<49bf44f10901230845u4c34d6c7ia546fcda81542661@mail.gmail.com>
<1232731334.25551.3.camel@hangover>
<49bf44f10901230951g2d687d87md8f7c629a72423d4@mail.gmail.com>
<1232733787.25551.6.camel@hangover>
Date: Fri, 23 Jan 2009 10:14:11 -0800
Message-ID: <49bf44f10901231014g31b7da8fk70a86dc0a5a7ebdf@mail.gmail.com>
Subject: Re: [gentoo-hardened] Grsecurity slows down a web server?
From: Grant <emailgrant@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 03d20e34-e6e0-469f-ac52-5ce8f8fe038a
X-Archives-Hash: d251ff60cf70265204f9126078425760
> [snip]
>
>> menuconfig isn't letting me disable PAGEEXEC. Maybe it's tied to
>> grsecurity "Gentoo (server)"? I don't want to disable that. Maybe I
>> should live with the slowdown?
>>
>
> No you should not.
>
> After selecting server and saving it. You want to then select "Custom"
> that will leave all the options enabled from "server". You then scroll
> over to the PaX menu and de-select PAGE and select SEGM.
>
> Easy as pie. Good luck.
Alright, thank you. PAGEEXEC and SEGMEXEC are both selected via
Gentoo (server) so I disabled PAGEEXEC. Should I submit a bug too?
- Grant