non executable stack setting in HP-UX 11.00

[Irfan Ahmed_1]

Hi all,
I have to do non exectuble stack setting in HP-UX 11.00. But the tunable system parameter - executable_stack is not present in my kernel parameter list ( kmtune -l ). I want to know how can I do this.
-Is there any patch using which I can do this..

Irfan

[Sridhar Bhaskarla]

Hi Ifran,

This parameter has been introduced only from 11i onwards. For 11.0 you would need to use 'chatr' command to disable executable_stack using '+es' flag. Unfortunately, this has to be done to every program that you suspect.

-Sri

[doug hosking]

Unfortunately the chatr approach will not work in 11.00. Regardless of what the output of any patched 11.00 versions of chatr may imply, the corresponding kernel logic to enforce any 'chatr +es' settings was never backported to 11.00, and at this stage of the 11.00 support life is highly unlikely to ever be. I'm sorry, but you must be running 11.11 or later to use the non-executable stack features of HP-UX.

[Irfan Ahmed_1]

Hi Hosking,

When I went through man pages for chatr the following is given,
"+es flag
Control the ability of user code to execute from stack with the flag values, enable and disable."
Please reply

[Dietmar Konermann]

It's just like Doug wrote above... the 11.00 kernel lacks the executable stack feature.

Best regards...
Dietmar.

[Irfan Ahmed_1]

Hi all,
Non-executable stack setting may not be possible in HP-UX 11.00