A utility for setting PaX markings on binaries.
Some programs need to have certain features of PaX disabled because they either have bugs or they require specific features like executable pages for JIT compilation.
paxmark
provides the ability to set appropriate markings on systems which use the
CONFIG_OPENPAX_XATTR_PAX_FLAGS
feature in their kernels.
% paxmark -[pP|eE|mM|rR|sS] <binary>
Capitalized letters enable specific PaX feature flags; lower case letters disable the
feature flag. Use --help
to get a full list of controllable feature flags with this
tool.
MIT