PAXCTL(8)

NAME
paxctl - list and modify PaX flags associated with an ELF program

SYNOPSIS
paxctl [-l] program
paxctl flags program

DESCRIPTION
The paxctl utility is used to list and manipulate PaX flags associated with an ELF program.

Each flag can be prefixed either with a “+” or a “-” sign to add or remove the flag, respectively.

The following flags are available:

g   Explicitly disable PaX Segvguard for program.

G   Explicitly enable PaX Segvguard for program.

m   Explicitly disable PaX MPROTECT ((mprotect) 2 restrictions) for program.

M   Explicitly enable PaX MPROTECT ((mprotect) 2 restrictions) for program.

SEE ALSO
sysctl(3), options(4), security(8), sysctl(8)

HISTORY
The paxctl utility first appeared in NetBSD 4.0.

The paxctl utility is modeled after a tool of the same name available for Linux from the PaX project.

BUGS

The paxctl utility currently utilizes elf(5) “note” sections to mark executables as PaX Segvguard enabled. This will be done using fileassoc(9) in the future so that we can control who does the marking.

AUTHORS
Elad Efrat <elad@NetBSD.org>