File: //etc/paxctld.conf
# grub
/usr/bin/grub-script-check E
/usr/bin/grub-bios-setup E
/usr/sbin/grub-mkdevicemap E
/usr/sbin/grub-probe E
# gdb
/usr/bin/gdb srpm
# qemu
/usr/bin/qemu-alpha m
/usr/bin/qemu-arm m
/usr/bin/qemu-armeb m
/usr/bin/qemu-cris m
/usr/bin/qemu-i386 m
/usr/bin/qemu-m68k m
/usr/bin/qemu-microblaze m
/usr/bin/qemu-microblazeel m
/usr/bin/qemu-mips m
/usr/bin/qemu-mips64 m
/usr/bin/qemu-mips64el m
/usr/bin/qemu-mipsel m
/usr/bin/qemu-mipsn32 m
/usr/bin/qemu-mipsn32el m
/usr/bin/qemu-or32 m
/usr/bin/qemu-ppc m
/usr/bin/qemu-ppc64 m
/usr/bin/qemu-ppc64abi32 m
/usr/bin/qemu-s390x m
/usr/bin/qemu-sh4 m
/usr/bin/qemu-sh4eb m
/usr/bin/qemu-sparc m
/usr/bin/qemu-sparc32plus m
/usr/bin/qemu-sparc64 m
/usr/bin/qemu-unicore32 m
/usr/bin/qemu-x86_64 m
/usr/bin/qemu-system-aarch64 m
/usr/bin/qemu-system-alpha m
/usr/bin/qemu-system-arm m
/usr/bin/qemu-system-cris m
/usr/bin/qemu-system-i386 m
/usr/bin/qemu-system-lm32 m
/usr/bin/qemu-system-m68k m
/usr/bin/qemu-system-microblaze m
/usr/bin/qemu-system-microblazeel m
/usr/bin/qemu-system-mips m
/usr/bin/qemu-system-mips64 m
/usr/bin/qemu-system-mips64el m
/usr/bin/qemu-system-mipsel m
/usr/bin/qemu-system-moxie m
/usr/bin/qemu-system-or32 m
/usr/bin/qemu-system-ppc m
/usr/bin/qemu-system-ppc64 m
/usr/bin/qemu-system-ppcemb m
/usr/bin/qemu-system-s390x m
/usr/bin/qemu-system-sh4 m
/usr/bin/qemu-system-sh4eb m
/usr/bin/qemu-system-sparc m
/usr/bin/qemu-system-sparc64 m
/usr/bin/qemu-system-unicore32 m
/usr/bin/qemu-system-x86_64 m
/usr/bin/qemu-system-xtensa m
/usr/bin/qemu-system-xtensaeb m
# skype
/usr/lib/skype/skype m
/usr/lib32/skype/skype m
# steam
/usr/lib32/ld-linux.so.2 m
# node
/usr/bin/node m
# chrome
/opt/google/chrome/chrome-sandbox m
/opt/google/chrome/nacl_helper m
/opt/google/chrome/chrome m
# chromium
/usr/lib/chromium-browser/chromium-browser m
/usr/lib/chromium/chromium m
# firefox
/usr/lib/firefox/firefox m
/usr/lib/firefox-esr/firefox-esr m
/usr/lib/firefox/plugin-container m
/usr/lib/firefox-esr/plugin-container m
# tor-browser
/usr/lib/tor-browser/firefox m
/usr/lib/tor-browser/plugin-container m
# webapp-container
/usr/bin/webapp-container m
# oxide
/usr/lib/x86_64-linux-gnu/oxide-qt/oxide-renderer m
# valgrind
/usr/bin/valgrind m
# python
#/usr/bin/python2.7 pEmrs
#/usr/bin/python3.5 pEmrs
/usr/bin/python3.6 pEmrs
/usr/libexec/platform-python3.6 pErms
# java
/usr/lib/jvm/java-6-sun-1.6.0.10/jre/bin/java m
/usr/lib/jvm/java-6-sun-1.6.0.10/jre/bin/javaws m
/usr/lib/jvm/java-6-openjdk/jre/bin/java m
/usr/lib/jvm/java-6-openjdk/jre/bin/java m
/usr/lib/jvm/java-8-openjdk/jre/bin/java m
/usr/lib/jvm/oracle-jdk-bin-1.8/bin/java m
/usr/lib/jvm/oracle-jdk-bin-1.8/jre/bin/java m
/usr/lib/jvm/zulu-8-amd64/bin/java m
/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java m
/usr/lib/jvm/java-8-openjdk-amd64/bin/jstack m
/usr/lib/jvm/java-8-openjdk-amd64/bin/javac m
# openrc
/lib/rc/bin/lsb2rcconf E
# libreoffice
# Ubuntu doesnt seem to carry this patch:
# https://bz.apache.org/ooo/show_bug.cgi?id=80816
# libreoffice will still run fine without the below line,
# but it will report an RWX mprotect attempt
# /usr/lib/libreoffice/program/soffice.bin m
# CentOS gnome settings (due to libgl)
/usr/bin/gnome-shell m
/usr/libexec/gnome-session-check-accelerated-gles-helper m
/usr/libexec/gnome-session-check-accelerated-gl-helper m
/usr/libexec/gnome-terminal-server m
/usr/bin/glxinfo m
/usr/bin/konsole m
/usr/bin/gnome-control-center m
# Debian gnome settings (due to libgl)
/usr/lib/gnome-settings-daemon/gnome-settings-daemon m
/usr/lib/gnome-session/gnome-session-check-accelerated m
/usr/lib/gnome-session/gnome-session-check-accelerated-gl-helper m
/usr/lib/gnome-session/gnome-session-check-accelerated-gles-helper m
/usr/lib/gnome-online-accounts/goa-daemon m
/usr/lib/evolution/evolution-alarm-notify m
/usr/bin/gnome-software m
/usr/bin/gnome-terminal m
# Additional Ubuntu 19.04 gnome settings (due to libgl)
/usr/lib/gnome-terminal/gnome-terminal-server m
# On Debian 9 32-bit, /bin/gzip is shipping with a textrel
# and thus needs mprotect disabled, only uncomment this
# under that situation
# /bin/gzip m
# mcafee
/opt/McAfee/agent/bin/masvc m
/opt/McAfee/agent/bin/macmnsvc m
/opt/McAfee/agent/bin/macompatsvc m
# tuned
/usr/sbin/tuned m
# polkitd
/usr/lib/polkit-1/polkitd m
# Xorg, uncomment if needed on your distribution
# /usr/lib/xorg/Xorg m
## Custom binaries - managed by Locaweb ##
/usr/bin/tr pErms
/usr/lib/cloud-init/ds-identify pEmrs
/usr/sbin/uwsgi pEmrs
/usr/sbin/httpd pEmrs
/usr/bin/grep pEmrs
/opt/lc/php/5.3/bin/php pEmrs
/opt/lc/php/5.3/bin/php-cgi pEmrs
/opt/lc/php/5.3/bin/phar.phar pEmrs
/opt/lc/php/5.3/bin/phpize pEmrs
/opt/lc/php/5.3/sbin/php-fpm pEmrs
/opt/lc/php/5.4/bin/php pEmrs
/opt/lc/php/5.4/bin/php-cgi pEmrs
/opt/lc/php/5.4/bin/phar.phar pEmrs
/opt/lc/php/5.4/bin/phpize pEmrs
/opt/lc/php/5.4/sbin/php-fpm pEmrs
/opt/lc/php/5.5/bin/php pEmrs
/opt/lc/php/5.5/bin/php-cgi pEmrs
/opt/lc/php/5.5/bin/phar.phar pEmrs
/opt/lc/php/5.5/bin/phpize pEmrs
/opt/lc/php/5.5/sbin/php-fpm pEmrs
/opt/lc/php/5.6/bin/php pEmrs
/opt/lc/php/5.6/bin/php-cgi pEmrs
/opt/lc/php/5.6/bin/phar.phar pEmrs
/opt/lc/php/5.6/bin/phpize pEmrs
/opt/lc/php/5.6/sbin/php-fpm pEmrs
/opt/lc/php/7.0/bin/php pEmrs
/opt/lc/php/7.0/bin/php-cgi pEmrs
/opt/lc/php/7.0/bin/phar.phar pEmrs
/opt/lc/php/7.0/bin/phpize pEmrs
/opt/lc/php/7.0/sbin/php-fpm pEmrs
/opt/lc/php/7.1/bin/php pEmrs
/opt/lc/php/7.1/bin/php-cgi pEmrs
/opt/lc/php/7.1/bin/phar.phar pEmrs
/opt/lc/php/7.1/bin/phpize pEmrs
/opt/lc/php/7.1/sbin/php-fpm pEmrs
/opt/lc/php/7.2/bin/php pEmrs
/opt/lc/php/7.2/bin/php-cgi pEmrs
/opt/lc/php/7.2/bin/phar.phar pEmrs
/opt/lc/php/7.2/bin/phpize pEmrs
/opt/lc/php/7.2/sbin/php-fpm pEmrs
/opt/lc/php/7.3/bin/php pEmrs
/opt/lc/php/7.3/bin/php-cgi pEmrs
/opt/lc/php/7.3/bin/phar.phar pEmrs
/opt/lc/php/7.3/bin/phpize pEmrs
/opt/lc/php/7.3/sbin/php-fpm pEmrs
/opt/lc/php/7.4/bin/php pEmrs
/opt/lc/php/7.4/bin/php-cgi pEmrs
/opt/lc/php/7.4/bin/phar.phar pEmrs
/opt/lc/php/7.4/bin/phpize pEmrs
/opt/lc/php/7.4/sbin/php-fpm pEmrs
/opt/lc/php/8.0/bin/php pEmrs
/opt/lc/php/8.0/bin/php-cgi pEmrs
/opt/lc/php/8.0/bin/phar.phar pEmrs
/opt/lc/php/8.0/bin/phpize pEmrs
/opt/lc/php/8.0/sbin/php-fpm pEmrs
# php remi repo
/opt/remi/php56/root/bin/php pEmrs
/opt/remi/php56/root/bin/php-cgi pEmrs
/opt/remi/php56/root/bin/phar.phar pEmrs
/opt/remi/php56/root/bin/phpize pEmrs
/opt/remi/php56/root/bin/php-config pEmrs
/opt/remi/php56/root/usr/sbin/php-fpm pEmrs
/opt/remi/php70/root/bin/php pEmrs
/opt/remi/php70/root/bin/php-cgi pEmrs
/opt/remi/php70/root/bin/phar.phar pEmrs
/opt/remi/php70/root/bin/phpize pEmrs
/opt/remi/php70/root/bin/php-config pEmrs
/opt/remi/php70/root/usr/sbin/php-fpm pEmrs
/opt/remi/php71/root/bin/php pEmrs
/opt/remi/php71/root/bin/php-cgi pEmrs
/opt/remi/php71/root/bin/phar.phar pEmrs
/opt/remi/php71/root/bin/phpize pEmrs
/opt/remi/php71/root/bin/php-config pEmrs
/opt/remi/php71/root/usr/sbin/php-fpm pEmrs
/opt/remi/php72/root/bin/php pEmrs
/opt/remi/php72/root/bin/php-cgi pEmrs
/opt/remi/php72/root/bin/phar.phar pEmrs
/opt/remi/php72/root/bin/phpize pEmrs
/opt/remi/php72/root/bin/php-config pEmrs
/opt/remi/php72/root/usr/sbin/php-fpm pEmrs
/opt/remi/php73/root/bin/php pEmrs
/opt/remi/php73/root/bin/php-cgi pEmrs
/opt/remi/php73/root/bin/phar.phar pEmrs
/opt/remi/php73/root/bin/phpize pEmrs
/opt/remi/php73/root/bin/php-config pEmrs
/opt/remi/php73/root/usr/sbin/php-fpm pEmrs
/opt/remi/php74/root/bin/php pEmrs
/opt/remi/php74/root/bin/php-cgi pEmrs
/opt/remi/php74/root/bin/phar.phar pEmrs
/opt/remi/php74/root/bin/phpize pEmrs
/opt/remi/php74/root/bin/php-config pEmrs
/opt/remi/php74/root/usr/sbin/php-fpm pEmrs
/opt/remi/php80/root/bin/php pEmrs
/opt/remi/php80/root/bin/php-cgi pEmrs
/opt/remi/php80/root/bin/phar.phar pEmrs
/opt/remi/php80/root/bin/phpize pEmrs
/opt/remi/php80/root/bin/php-config pEmrs
/opt/remi/php80/root/usr/sbin/php-fpm pEmrs
/opt/remi/php81/root/bin/php pEmrs
/opt/remi/php81/root/bin/php-cgi pEmrs
/opt/remi/php81/root/bin/phar.phar pEmrs
/opt/remi/php81/root/bin/phpize pEmrs
/opt/remi/php81/root/bin/php-config pEmrs
/opt/remi/php81/root/usr/sbin/php-fpm pEmrs
/opt/remi/php82/root/bin/php pEmrs
/opt/remi/php82/root/bin/php-cgi pEmrs
/opt/remi/php82/root/bin/phar.phar pEmrs
/opt/remi/php82/root/bin/phpize pEmrs
/opt/remi/php82/root/bin/php-config pEmrs
/opt/remi/php82/root/usr/sbin/php-fpm pEmrs
/opt/remi/php83/root/bin/php pEmrs
/opt/remi/php83/root/bin/php-cgi pEmrs
/opt/remi/php83/root/bin/phar.phar pEmrs
/opt/remi/php83/root/bin/phpize pEmrs
/opt/remi/php83/root/bin/php-config pEmrs
/opt/remi/php83/root/usr/sbin/php-fpm pEmrs
# ovirt
/usr/sbin/virt-what pEmrs
/usr/bin/qemu-ga pEmrs
# nginx
/usr/sbin/nginx pEmrs
# cloud-init
/usr/libexec/cloud-init/ds-identify pEmrs
/usr/bin/cloud-id pEmrs
/usr/bin/cloud-init pEmrs
/usr/bin/cloud-init-per pEmrs