from small one page howto to huge articles all in one place
 

search text in:





Poll
Which kernel version do you use?





poll results

Last additions:
using iotop to find disk usage hogs

using iotop to find disk usage hogs

words:

887

views:

101651

userrating:

average rating: 1.7 (84 votes) (1=very good 6=terrible)


May 25th. 2007:
Words

486

Views

216622

why adblockers are bad


Workaround and fixes for the current Core Dump Handling vulnerability affected kernels

Workaround and fixes for the current Core Dump Handling vulnerability affected kernels

words:

161

views:

97451

userrating:

average rating: 1.3 (28 votes) (1=very good 6=terrible)


April, 26th. 2006:

Druckversion
You are here: manpages





REVDEP-PAX

Section: Documentation for elfix (1)
Updated: 2014-11-03
Index Return to Main Contents
 

NAME

revdep-pax - find mismatching PaX markings between ELF objects and their libraries  

SYNOPSIS

revdep-pax -f [-v]

revdep-pax -r [-ve]

revdep-pax -b OBJECT [-myv]

revdep-pax -s SONAME [-myve]

revdep-pax -l LIBRARY [-myve]

revdep-pax [-h]  

DESCRIPTION

revdep-pax finds mismatching PaX markings between an ELF object and the libraries which that object dynamically links against. When executing an ELF binary that links against libraries, the PaX hardened kernel ignores the libraries' markings and uses the executable's markings to enforce PaX restrictions. It is desireable in some circumstances to reverse migrate a library's markings to the binaries that link against it.

revdep-pax can either forward migrate PaX markings from an ELF object to its libraries, or reverse migrate from a library to all the objects that link against it. The library can either be specified by its SONAME as it is reported by ldd(1), or by the full path to the LIBRARY file. Symbolic links are dereferenced. The user can optionally scan for all forward mappings on the system (-f), for all reverse mappings (-r), for forward mappings of just one OBJECT (-b), for reverse mappings of just one SONAME (-s) or one LIBRARY (-l). In verbose mode (-v), all mappings are reported, not just mismatching ones, and in mark mode (-m), the user is prompted whether to proceed with the migration, so that the PaX flags of the target inherit the flags of the source.  

OPTIONS

-f Scan the system for all forward mappings.
-r Scan the system for all reverse mappings.
-b OBJECT Retrieve only the forward mappings for this ELF OBJECT.
-s SONAME Retrieve only the reverse mappings for this SONAME.
-l LIBRARY Retrieve only the reverse mappings for this LIBRARY.
-v Report all mappings, not just the mismatched ones.
-e Limit the markings or report to only those executables in the current shell's $PATH.
-m Prompt the user to mark the found object with the PaX flags of the source.
-y Assume yes to all prompts for marking (USE CAREFULLY!)
-h Print out a short help message and exit.
 

HOMEPAGE

http://www.gentoo.org/proj/en/hardened/pax-quickstart.xml  

REPORTING BUGS

Please report bugs at http://bugs.gentoo.org.  

SEE ALSO

scanelf(1), dumpelf(1), paxctl(1), pspax(1), fix-gnustack(1), ldd(1)  

AUTHORS

Anthony G. Basile <blueness@gentoo.org>


 

Index

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
HOMEPAGE
REPORTING BUGS
SEE ALSO
AUTHORS


Please read "Why adblockers are bad".



Other free services
toURL.org
Shorten long
URLs to short
links like
http://tourl.org/2
tourl.org
.
Reverse DNS lookup
Find out which hostname(s)
resolve to a
given IP or other hostnames for the server
www.reversednslookup.org
rdf newsfeed | rss newsfeed | Atom newsfeed
- Powered by LeopardCMS - Running on Gentoo -
Copyright 2004-2017 Sascha Nitsch Unternehmensberatung UG(haftungsbeschränkt)
Valid XHTML1.1 : Valid CSS : buttonmaker
- Level Triple-A Conformance to Web Content Accessibility Guidelines 1.0 -
- Copyright and legal notices -
Time to create this page: 26.5 ms