KernelTrap: PaX vs. ExecShield, An ExecShield Perspective

“In an interesting conversation spun off an earlier discussion
about how and where to report Linux kernel security issues, Linux
kernel guru Ingo Molnar offered some insights into the differences
between PaX and ExecShield.

“Linus Torvalds began the conversation noting, ‘quite frankly,
nobody should ever depend on the kernel having zero holes. We do
our best, but if you want real security, you should have other
shields in place. exec-shield is one…'”

Complete Story