diff options
| author |   Anthony G. Basile <blueness@gentoo.org> | 2011-09-18 10:20:22 -0400 |
|---|---|---|
| committer | Anthony G. Basile <blueness@gentoo.org> | 2011-09-18 10:20:22 -0400 |
| commit | d7add1d5f80d33c20b636e4cce0cdd03a5155d35 (patch) | |
| tree | ca7e8db9347b18b1e2c00ae84c8104396073ee45 | |
| parent | src/paxctl-ng.c: set EI_PAX flags (diff) | |
| download | elfix-d7add1d5f80d33c20b636e4cce0cdd03a5155d35.tar.gz elfix-d7add1d5f80d33c20b636e4cce0cdd03a5155d35.tar.bz2 elfix-d7add1d5f80d33c20b636e4cce0cdd03a5155d35.zip | |
src/paxctl-ng.c: set PT_PAX flags
| -rw-r--r-- | src/paxctl-ng.c | 49 |
1 files changed, 42 insertions, 7 deletions
diff --git a/src/paxctl-ng.c b/src/paxctl-ng.c index 3842d08..9d6a76e 100644 --- a/src/paxctl-ng.c +++ b/src/paxctl-ng.c @@ -53,11 +53,11 @@ print_help(char *v) "Description : Get or set pax flags on an ELF object\n\n" "Usage : %s [-PpEeMmRrXxSsv ELF] | [-Z ELF] | [-z ELF] | [-h]\n\n" "Options : -P enable PAGEEXEC\t-p disable PAGEEXEC\n" - " : -E enable EMUTRAMP\t-e disable EMUTRAMP\n" + " : -S enable SEGMEXEC\t-s disable SEGMEXEC\n" " : -M enable MPROTECT\t-m disable MPROTECT\n" + " : -E enable EMUTRAMP\t-e disable EMUTRAMP\n" " : -R enable RANDMMAP\t-r disable RANDMMAP\n" " : -X enable RANDEXEC\t-x disable RANDEXEC\n" - " : -S enable SEGMEXEC\t-s disable SEGMEXEC\n" " : -Z most secure settings\t-z all default settings\n" " : -v view the flags\n" " : -h print out this help\n\n" @@ -292,22 +292,57 @@ set_flags(Elf *elf, int *pax_flags) if(!gelf_update_ehdr(elf, &ehdr)) error(EXIT_FAILURE, 0, "gelf_update_ehdr(): %s", elf_errmsg(elf_errno())); - /* elf_getphdrnum(elf, &phnum); for(i=0; i<phnum; ++i) { if(gelf_getphdr(elf, i, &phdr) != &phdr) error(EXIT_FAILURE, 0, "gelf_getphdr(): %s", elf_errmsg(elf_errno())); - if((phdr.p_type == PT_PAX_FLAGS) && flag_pt_pax_flags ) + if(phdr.p_type == PT_PAX_FLAGS) { - printf("CONVERTED -> PT_NULL\n\n"); - phdr.p_type = PT_NULL; + //Take and Pp flags and conver them to - + if((*pax_flags & PF_PAGEEXEC) && (*pax_flags & PF_NOPAGEEXEC)) + { + *pax_flags ^= PF_PAGEEXEC; + *pax_flags ^= PF_NOPAGEEXEC; + } + + if((*pax_flags & PF_SEGMEXEC) && (*pax_flags & PF_NOSEGMEXEC)) + { + *pax_flags ^= PF_SEGMEXEC; + *pax_flags ^= PF_NOSEGMEXEC; + } + + if((*pax_flags & PF_MPROTECT) && (*pax_flags & PF_NOMPROTECT)) + { + *pax_flags ^= PF_MPROTECT; + *pax_flags ^= PF_NOMPROTECT; + } + + if((*pax_flags & PF_EMUTRAMP) && (*pax_flags & PF_NOEMUTRAMP)) + { + *pax_flags ^= PF_EMUTRAMP; + *pax_flags ^= PF_NOEMUTRAMP; + } + + if((*pax_flags & PF_RANDMMAP) && (*pax_flags & PF_NORANDMMAP)) + { + *pax_flags ^= PF_RANDMMAP; + *pax_flags ^= PF_NORANDMMAP; + } + + if((*pax_flags & PF_RANDEXEC) && (*pax_flags & PF_NORANDEXEC)) + { + *pax_flags ^= PF_RANDEXEC; + *pax_flags ^= PF_NORANDEXEC; + } + + phdr.p_flags = *pax_flags ; + if(!gelf_update_phdr(elf, i, &phdr)) error(EXIT_FAILURE, 0, "gelf_update_phdr(): %s", elf_errmsg(elf_errno())); } } - */ } |