Prevention in grsecurity - PaX
{"Image DocumentName": "Prevention in grsecurity - PaX", "Image ImageDescription": "Non-executable pages are made supervisor in the TLB; executable pages are left as user. If CPU is in user mode, access to the non-executable pages causes a page-fault which PaX handles. Makes up the core logic of how PaX works. Makes PaX ineffective against kernel overflows. Mmap(2) and mprotect(2) restrictions/features. Disallows anonymous mappings with PROT_EXEC present \u2013 stops one method of arbitrary code execution (another method, mapping a file with PROT_EXEC, is handled by ACL system)", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}