Re: Exec Shield for Linux 2.6.x.y?

> Dear Fedora developers or Experts! > > Can you tell me if these is an Exec Shield kernel patch for most recent 2.6 > series vanilla kernels being able to do full ALSR functionality, including > the relocation of PIE binaries? > > When I look at Ingo Molnar's Exec Shield patch web page > (http://people.redhat.com/mingo/exec-shield/), I got the impression that a > fully featured Exec Shield patch set exists only for the 2.4 series of the > Linux kernels. Am I correct? > Without knowing all the nitty gritty details, I believe this is because a subset of the initial 2.4 patch is included in upstream 2.6. I would suggesting asking one of the Fedora kernel guys, or Ingo if you want to know for sure. This list is primarily for dealing with security vulnerabilities in Fedora. I doubt anyone on this list knows enough about the working of Exec Shield to feel comfortable answering your question.