Provided by: paxctld_1.2.1-1_amd64 bug

NAME

       paxctld - Daemon to automatically apply appropriate PaX flags

SYNOPSIS

       paxctld [ -c <config_file> ] [ -d ] [ -p <pid_file> ] [ -q ]

DESCRIPTION

       paxctld is a daemon that automatically applies PaX flags to binaries on the system.  These
       flags are applied via user extended attributes and are refreshed  on  any  update  to  the
       binaries specified in its configuration file.

       paxctld.conf is the configuration file located in /etc that defines which binaries to mark
       with specific PaX flags.  The format of this configuration file is multiple lines  of  the
       form:

              <full pathname> <PaX flags> [nonroot]

       Empty  lines  or lines beginning with '#' are ignored.  Files that have spaces in the path
       leading to them must be surrounded in double quotes. The optional nonroot string is to  be
       used  if  the  file  being  marked is not owned by root.  paxctld will not allow files not
       owned by root to be marked (or have their symlinks followed) without this string.  If  the
       pathname  specifies  a  symlink not owned by root, the target of the symlink must have the
       same owner.

OPTIONS

       -c <config_file>
              Specify a config file other than the default of /etc/paxctld.conf

       -d     Make paxctld run as a daemon

       -p <pid_file>
              Specify the pid file to use when running in daemon mode

       -q     Enable quiet mode to suppress all syslogs from paxctld

REPORTING BUGS

       Please  include  as   much   information   as   possible   and   send   bug   reports   to
       spender@grsecurity.net

AUTHOR

       paxctld was created and is maintained by Brad Spengler <spender@security.net>

                                                                                       PAXCTLD(8)