Hi,
Is it that pax aslr is disabled in kernel 2.6.31 or gcc 4.4.2? I have tried on both Fedora 12 and Ubuntu 9.10. I wrote a small C program and used gdb to see the addresses on the registers esp ebp etc.. and they seem to be the same every time I recompile and rerun the program using gdb. I had tried this long ago on Fedora 10 and it work correctly at that time and the addresses in those were getting randomized. I made sure that kernel.randomize_va_space is set to 2 instead of to 0 . I am not very knowledgeable on this, so I might also be doing a silly mistake. If anyone has an idea why this is happening it would be great to let me know
Thanks,
Vikram Gade

The kernel does not include pax aslr by default. The kernel does use some alsr but it is not as extensive as pax aslr and it is not the same thing.

Hey all,

I heard that Ubuntu made some improvements in security has they now use as default the "hardening option" during the compilation:
- stack protector
- ASLR

What do you think of it ?

I also heard some criticize saying that they do it, to tell it to the world, but the implementation is poor.
Any opinions ?

Thanks