oXA mode in debian_secure_acls/apache

Submit your RBAC policies or suggest policy improvements

oXA mode in debian_secure_acls/apache

Postby hardigunawan » Thu Jan 16, 2003 9:46 pm

Hi,

As above, today I downloaded gradm from cvs and saw that the subject mode for apache inside the debian_secure_acls is set to oXA. Searching the docs, I can't find definition on X and A. Is it a new type?
hardigunawan
 
Posts: 10
Joined: Tue Jan 14, 2003 5:10 am

Postby spender » Thu Jan 16, 2003 10:16 pm

X means to enable the RANDEXEC feature of PaX on the binary
A means to protect the shared memory of the process...only apache will be able to attach to it

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to RBAC policy development