| 1 |
<?xml version="1.0" encoding="UTF-8"?>
|
| 2 |
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
| 3 |
<pkgmetadata>
|
| 4 |
<herd>hardened</herd>
|
| 5 |
<maintainer>
|
| 6 |
<email>solar@gentoo.org</email>
|
| 7 |
<description>Primary Maintainer</description>
|
| 8 |
</maintainer>
|
| 9 |
<longdescription>Test suite for the PaX kernel patch
|
| 10 |
PaX is a Linux kernel patch which adds much stricter control on how memory
|
| 11 |
is being used by applications. A normal Linux kernel leaves the control to the
|
| 12 |
application and does not implement any enforcement. Especially buffer overflow
|
| 13 |
attacks benefit from the absense of kernel enforced memory control. PaX tries
|
| 14 |
to do its best to enforce this control of memory used by applications, thereby
|
| 15 |
making it harder to succesfully exploit buffer overflows.
|
| 16 |
.
|
| 17 |
Furthermore, it adds several randomisations, which also make it harder for
|
| 18 |
buffer overflows to succeed.
|
| 19 |
.
|
| 20 |
The test programs test all this functionality, but not all PaX functionality
|
| 21 |
is covered.
|
| 22 |
.
|
| 23 |
For more information about PaX, see http://pageexec.virtualave.net/.
|
| 24 |
</longdescription>
|
| 25 |
</pkgmetadata>
|