PaX is a kernel patch that enhances security by adding non-executable memory pages.
I recently tried out PaX, a kernel patch that adds an extra layer of security by implementing non-executable memory pages. It's a forward port from 2.4 with some supplementary features. However, it's worth noting that only i386 architecture is known to work so far - feedback is welcomed from users with other architectures.
Just like the 2.6 kernel, PaX for 2.6 is experimental and there may be some issues that arise. It's important to keep in mind that all versions for 2.6 before March 5, 2005, have a privilege elevation bug that needs immediate attention. Additionally, all versions for 2.6 before May 1, 2004, have a local kernel denial of service bug which was brought to our attention by ChrisR.
Despite these minor bugs, I found PaX to be a reliable and effective patch for additional security measures. Its non-executable memory pages feature provides an extra layer of protection against cyber attacks, and it's definitely worth checking out for anyone looking to enhance their system's security.
Just like the 2.6 kernel, PaX for 2.6 is experimental and there may be some issues that arise. It's important to keep in mind that all versions for 2.6 before March 5, 2005, have a privilege elevation bug that needs immediate attention. Additionally, all versions for 2.6 before May 1, 2004, have a local kernel denial of service bug which was brought to our attention by ChrisR.
Despite these minor bugs, I found PaX to be a reliable and effective patch for additional security measures. Its non-executable memory pages feature provides an extra layer of protection against cyber attacks, and it's definitely worth checking out for anyone looking to enhance their system's security.
What's New
Version 2.6: N/A