From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LQPde-00058U-2X for garchives@archives.gentoo.org; Fri, 23 Jan 2009 17:16:14 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1844AE0951; Fri, 23 Jan 2009 17:15:32 +0000 (UTC) Received: from ey-out-1920.google.com (ey-out-1920.google.com [74.125.78.148]) by pigeon.gentoo.org (Postfix) with ESMTP id C434BE0951 for ; Fri, 23 Jan 2009 17:15:31 +0000 (UTC) Received: by ey-out-1920.google.com with SMTP id 4so630592eyg.10 for ; Fri, 23 Jan 2009 09:15:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=wN1DqmZ/JBPmPIbJl0fUuBrH1u/OnbL8WhJbhrRDjok=; b=V0q1QmRldF2Ijfhb2TsvpU2qeybNGzjALHPo3U1UJbAk9FMt1lpuuPekE2cGRgvMVg gJJEWyp8IntmtZTGa25RaYhb/Fim9td7lCN4miFT2BF+c+4mneW9dXp0GVFUEOdIo6Nt sKtEOUJB49G4/UA4kdDhoq7tt3gxeVCtsWyBc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=K8LoHcL7kKD7Rpv+CfplD+1ywew+8CeMhVdeHDECDpTtwKCQIoC6iRSRL5J3bHSFjV wcUNuZlVwtt181PNp08O2zQNawOcTmUjDF8TBXrF8JuE7xeOsKnUKzdLPBxMVIb/KFvf xgs5sI5KzmPVlB0LIRzVAlZPPhiJigVT8becE= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Received: by 10.103.241.15 with SMTP id t15mr4716096mur.85.1232730895002; Fri, 23 Jan 2009 09:14:55 -0800 (PST) In-Reply-To: <35572ca80901230852g16362bc1q76697e4a6638033f@mail.gmail.com> References: <49bf44f10901222037x6efccacbqd428e5e7be0899f6@mail.gmail.com> <497985F1.25065.4B5BFE@pageexec.freemail.hu> <49bf44f10901230610y54cf1a67q76fddf7ee5dc19de@mail.gmail.com> <4979DECC.6678.1A67431@pageexec.freemail.hu> <49bf44f10901230845u4c34d6c7ia546fcda81542661@mail.gmail.com> <35572ca80901230852g16362bc1q76697e4a6638033f@mail.gmail.com> Date: Fri, 23 Jan 2009 18:14:54 +0100 Message-ID: Subject: Re: [gentoo-hardened] Grsecurity slows down a web server? From: Ermanno Baschiera To: gentoo-hardened@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: 593bf20e-d471-4e37-b579-d1e4ea5ef0b0 X-Archives-Hash: 28a0d67d749bc94cd81bb55a91fb041e Maybe it can be activated in bios configuration? -ermanno 2009/1/23 Ren=C3=A9 Rh=C3=A9aume : > On Fri, Jan 23, 2009 at 11:45 AM, Grant wrote: >> Very close. PAGEEXEC is enabled, but so is SEGMEXEC. My CPU is a >> P4-2.8, and I'm not sure about NX support but these are the flags: >> >> fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 >> clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe constant_tsc pebs bts >> pni monitor ds_cpl cid xtpr > > There is no "nx" in your cpuinfo flags. Therefore, your P4 does not > have the hardware NX bit (or XD bit in Intel wording) > >