Changeset 101530 in vbox for trunk/src/VBox/HostDrivers

Timestamp:

Oct 20, 2023 4:37:38 PM (14 months ago)

Author:

vboxsync

Message:

SUPDrv: Doc update on PaX/grsec tweak. bugref:8864

File:

• trunk/src/VBox/HostDrivers/Support/linux/SUPDrv-linux.c (modified) (1 diff)

trunk/src/VBox/HostDrivers/Support/linux/SUPDrv-linux.c

@@ -1692 +1692 @@
              straight forward any longer it seems (which is weird for linux
              patches), so, we've just enabled slow-mode for all PAX_KERNEXEC
-             kernels regardless of kernel version. */
+             kernels regardless of kernel version.
+
+             Looking at grsecurity patch for 4.9.9, it looks like the writable
+             GDT stuff never worked with PaX/grsec.
+             */
 #ifdef CONFIG_PAX_KERNEXEC
     fFlags |= SUPKERNELFEATURES_GDT_READ_ONLY;