diff options
| author |   Magnus Granberg <zorry@gentoo.org> | 2013-01-12 15:18:38 +0100 |
|---|---|---|
| committer | Magnus Granberg <zorry@gentoo.org> | 2013-01-12 15:18:38 +0100 |
| commit | 1782f8ce0113f44ac5f1710b527327e3a4def915 (patch) | |
| tree | 15bceb012195322b6627c9abf143dd2ff07615d1 | |
| parent | Update in index page for hardened project site (diff) | |
| download | hardened-docs-1782f8ce0113f44ac5f1710b527327e3a4def915.tar.gz hardened-docs-1782f8ce0113f44ac5f1710b527327e3a4def915.tar.bz2 hardened-docs-1782f8ce0113f44ac5f1710b527327e3a4def915.zip | |
Add orc use flag to the faq
| -rw-r--r-- | xml/hardenedfaq.xml | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/xml/hardenedfaq.xml b/xml/hardenedfaq.xml index 9be1ffb..73760e3 100644 --- a/xml/hardenedfaq.xml +++ b/xml/hardenedfaq.xml @@ -339,7 +339,7 @@ there should fix your problem. </section> <section id="jitflag"> -<title>Why is the jit flag disabled in the hardened profile?</title> +<title>Why is the jit and orc flag disabled in the hardened profile?</title> <body> <p> @@ -349,7 +349,8 @@ binary code in memory and then executing the compiled code. This means that the program need a section of memory which has write and execution permissions to write and then execute the code which is denied by PaX, unless the mprotect flag is unset for the executable. As a result, we disabled the JIT use flag by -default to avoid complaints and security problems. +default to avoid complaints and security problems. ORC use Just In Time +Compilation (jit). </p> <p> @@ -362,7 +363,7 @@ execute any code it wants to. </section> <section id="enablejit"> -<title>How do I enable the jit flag?</title> +<title>How do I enable the jit or orc flag?</title> <body> <p> @@ -399,7 +400,7 @@ SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" </pre> <impo> -Remember that if you enable JIT code on PaX you may need to disable mprotect on +Remember that if you enable JIT or ORC code on PaX you may need to disable mprotect on the binaries using such code, either by them selves or through libraries. Check the <uri link="#paxjavajit">PaX question on Java and JIT to see how to do this </uri> |