Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   9087 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

PAXCTL(8)		  BSD System Manager's Manual		     PAXCTL(8)

NAME
     paxctl — list and modify PaX flags associated with an ELF program

SYNOPSIS
     paxctl flags program ...

DESCRIPTION
     The paxctl utility is used to list and manipulate PaX flags associated
     with an ELF program.  The PaX flags signify to the loader the privilege
     protections to be applied to mapped memory pages, and fuller explanations
     of the specific protections can be found in the security(7) manpage.

     Each flag can be prefixed either with a “+” or a “-” sign to add or
     remove the flag, respectively.

     The following flags are available:

     a	   Explicitly disable PaX ASLR (Address Space Layout Randomization)
	   for program.

     A	   Explicitly enable PaX ASLR for program.

     g	   Explicitly disable PaX Segvguard for program.

     G	   Explicitly enable PaX Segvguard for program.

     m	   Explicitly disable PaX MPROTECT (mprotect(2) restrictions) for
	   program.

     M	   Explicitly enable PaX MPROTECT (mprotect(2) restrictions) for
	   program.

     To view existing flags on a file, execute paxctl without any flags.

SEE ALSO
     mprotect(2), sysctl(3), options(4), elf(5), security(7), sysctl(8),
     fileassoc(9)

HISTORY
     The paxctl utility first appeared in NetBSD 4.0.

     The paxctl utility is modeled after a tool of the same name available for
     Linux from the PaX project.

AUTHORS
     Elad Efrat ⟨elad@NetBSD.org⟩
     Christos Zoulas ⟨christos@NetBSD.org⟩

BUGS
     The paxctl utility currently uses elf(5) “note” sections to mark executa‐
     bles as PaX Segvguard enabled.  This will be done using fileassoc(9) in
     the future so that we can control who does the marking and not altering
     the binary file signature.

BSD			      September 17, 2009			   BSD

                             _         _         _ 
                            | |       | |       | |     
                            | |       | |       | |     
                         __ | | __ __ | | __ __ | | __  
                         \ \| |/ / \ \| |/ / \ \| |/ /  
                          \ \ / /   \ \ / /   \ \ / /   
                           \   /     \   /     \   /    
                            \_/       \_/       \_/ 

Vote for polarhome