Skip to content
Switch branches/tags

Latest commit


Git stats


Failed to load latest commit information.
Latest commit message
Commit time
Utilities to modify Elf binaries to work with PaX hardened kernel.
There are several utilities in here, to help you navigate:

Directories src/ scripts/ doc/ test/ are integral parts of the elfix package.
These are distributed as one source tarball with `make dist` run in the top
    * paxctl-ng - C utility for doing XT_PAX and/or PT_PAX markings.
    * pypaxctl - python utility for doing XT_PAX and/or PT_PAX markings.  Depends on
    * migrate-pax - python utility for migrating from XT_PAX flags to PT_PAX.  Depends on
    * revdep-pax - python utility for mapping ELF libraries to/from the ELF objects that link
      against them and migrating PAX flags between them.  Depends on
    * - Bash script that does intelligent pax-marking like the pax-utils.eclass.
    * paxmodule.c - C code for python module

Directories under misc/ are independant packages from one another and from the
elfix package.  They are NOT distributed with elfix when running `make dist` in
the top directory.  Each directory supplies its own build system.
    * install-xattr - C wrapper to coreutils' install which preserves file system extended attributes.

Directory pocs/ - Very experimental stuff.
    * change-interp - C utility to the dynamic linker, INTERP as reported by `readelf -l`.
    * eclass - a local copy of the pax-utils.eclass
    * elf-manipulate - some dirty utilities to
        * clear-dt-path.c - remove RPATH and RUNPATH
        * parse-elf.c - print out the ELF header, sections headers and program headers.
        * print-sections.c - print out the contents of the section headers
        * remove-ptpax.c - change a PT_PAX_FLAGS phdr to PT_NULL
    * ldd - python script to reproduce ldd's output using pyelftools
    * link-maps - use VDB information to produce a full linkage map of the system
    * mangle-paxflags - printout old EI_PAX flags and PT_PAX flags
    * paxmark-libs - test how PAX flags migrate from libraries and plugins to their consumers
    * revdep-pax-ng - same as revdep-pax but using information obtained from `ldd` and
      not VDB information.


elfix for Debian package




No releases published


No packages published