View | Details | Raw Unified
Collapse All | Expand All

(-) /usr/portage/sys-apps/chpax/files/pax-conf.d (-20 / +36 lines)
 Lines 1-28    Link Here  
####################################################################
####################################################################
#         Copyright 1999-2004 Gentoo Technologies, Inc.            #
 
#         Copyright 1999-2003 Gentoo Technologies, Inc.            #
 
# Distributed under the terms of the GNU General Public License v2 #
# Distributed under the terms of the GNU General Public License v2 #
####################################################################
####################################################################
#
 
# chpax	prefix	description
 
# p	do not enforce paging based non-executable pages
 
# p	PE	do not enforce paging based non-executable pages
 
# e	do not emulate trampolines
 
# E	ET	emulate trampolines
 
# r	do not randomize mmap() base [ELF only]
 
# r	RE	do not randomize mmap() base [ELF only]
 
# m	do not restrict mprotect()
 
# m	ME	do not restrict mprotect()
 
# s	do not enforce segmentation based non-executable pages
 
# s	SE	do not enforce segmentation based non-executable pages
 
# x	do not randomize ET_EXEC base [ELF only]
 
# x	XE	do not randomize ET_EXEC base [ELF only]
 
# z	zero flag mask
 

            

            

              

              

            

            

              
JAVA=/opt/blackdown-jdk-*/jre/{java,java_vm,keytool,kinit,klist,ktab,orbd,policytool,rmid,rmiregistry,servertool,tnameserv}

              

            

            

              
WINE=/usr/lib/wine/bin/wine/{wine,winebuild,wineclipsrv,winedump,winegcc,wineserver,winewrap}

              

            

            

              

              

            

            

              
# most things that need pageexec need segmexec and or vice versa so we set both.

              

            

            

              
PAGEEXEC_EXEMPT="/usr/X11R6/bin/XFree86 /usr/bin/xmms /usr/bin/mplayer /opt/OpenOffice*/program/soffice.bin \

              

            

            

              
 /usr/bin/blender /usr/bin/gxine /usr/bin/totem /usr/bin/acme $JAVA $WINE"

              

            

        

            

              
              
# "blkdwn_java" would be blackdown-jdk or blackdown-jre

            

            

              
              

            

            

              
              
# chpax command.  If using multiple tools, can separate by spaces.

            

            

              
              
# This one hits BOTH chpax and paxctl

            

            

              
              
CHPAX="/sbin/chpax /sbin/paxctl"

            

            

              
              
#CHPAX="/sbin/paxctl"

            

            

              
              
#CHPAX="/sbin/chpax"

            

            

              
              

            

            

              
              
PE_wine=/usr/lib/wine/bin/{wine{,build,clipsrv,dump,gcc,server,wrap,-{k,p}thread},w{mc,rc,idl}}

            

            

              
              
#PE_wine=/usr/lib/wine/bin/{wine{,server,-pthread}

            

            

              
              
PE_blackdown_java=/opt/blackdown-{jdk-*/{,jre/},jre-*/}bin/{java{,_vm},keytool,kinit,klist,ktab,orbd,policytool,rmi{d,registry},servertool,tnameserv}

            

            

              
              
PE_openoffice=/opt/OpenOffice.org*/program/soffice.bin

            

            

              
              
PE_misc="/usr/X11R6/bin/XFree86 /usr/bin/xmms /usr/bin/mplayer \

            

            

              
              
 /usr/bin/blender /usr/bin/gxine /usr/bin/xine /usr/bin/totem /usr/bin/acme \

            

            

              
              
 /usr/bin/gnome-sound-recorder /usr/games/bin/bzflag /usr/bin/xfce4-panel"

            

            

              
              
RE_blkdwn_java="${PE_blkdwn_java}"

            

            

              
              
ME_blkdwn_java="${PE_blkdwn_java}"

            

            

              
              
XE_blkdwn_java="${PE_blkdwn_java}"

            

            

              
              

            

            

              
              
####################################

            

            

              
              
# Settings are really applied here #

            

            

              
              
####################################

            

            

              
              

            

            

              
              
PAGEEXEC_EXEMPT="${PE_misc} ${PE_wine} ${PE_blkdwn_java} ${PE_openoffice}"

            

        
TRAMPOLINE_EXEMPT=""
TRAMPOLINE_EXEMPT=""

            

              
MPROTECT_EXEMPT=""

              
MPROTECT_EXEMPT="${ME_blkdwn_java}"

            

            

              
RANDMMAP_EXEMPT=""

              
RANDMMAP_EXEMPT="${RE_blkdwn_java}"

            

        
SEGMEXEC_EXEMPT="${PAGEEXEC_EXEMPT}"
SEGMEXEC_EXEMPT="${PAGEEXEC_EXEMPT}"

            

              
RANDEXEC_EXEMPT="${JAVA}"

              
RANDEXEC_EXEMPT="${XE_blkdwn_java}"

            

        

        
# when zero flag mask is set to "yes" it will remove all pax flags from all files on reboot/stop
# when zero flag mask is set to "yes" it will remove all pax flags from all files on reboot/stop

            

              
ZERO_FLAG_MASK=yes

              
ZERO_FLAG_MASK="no"