computer security, PaX is a patch for the Linux kernel that implements least privilege protections for memory pages. The least-privilege approach allows computer programs to do only what they have to do in order to be able to execute properly, and nothing more. PaX was first released in 2000.

PaX flags data memory as non-executable, program memory as non-writable and randomly arranges the program memory. This effectively prevents many security exploits, such as some kinds of buffer overflows. The former prevents direct code execution absolutely, while the latter makes so-called return-to-libc (ret2libc) attacks difficult to exploit, relying on luck to succeed, but doesn't prevent variables and pointers overwriting.

PaX is maintained by The PaX Team, whose principal coder is anonymous


--------------------------------------------------
Note added at 4 ore (2010-08-22 15:55:22 GMT)
--------------------------------------------------

(Private Automatic Exchange) An inhouse intercom system.

(2) (Parallel Architecture Extended) A parallel processing environment standard based on Intel's i860 RISC chip, Unix System V and Alliant Computer's parallel and 3D graphics technologies.


--------------------------------------------------
Note added at 4 ore (2010-08-22 16:14:12 GMT)
--------------------------------------------------

الناقل الأوتوماتيكي الخاص