On 7 Sep 2015 at 11:06, René Rhéaume wrote: > 2015-09-07 10:41 GMT-04:00 PaX Team <pagee...@freemail.hu>: > > i wouldn't call it magic but PaX used to provide RANDEXEC: > > > > https://pax.grsecurity.net/docs/randexec.txt > > Is RANDEXEC abandoned because it could not be ported to other architectures?
no, portability isn't a concern in general (if it were, we'd have removed half the features already ;). rather, the underlying code was too complex to maintain after a while (IIRC, it's become much harder with the 2.6 kernel series) and the benefits weren't enough to justify the costs (e.g., false positives, performance impact).
