Grsecurity/PAX and gstreamer/ORC

[Tim-Philipp Müller]

On Wed, 2012-06-20 at 16:32 +0100, Kevin Chadwick wrote:

> > Is there anything wrong with always using the ORC_CODE=emulate debug
> > option except a slight performance decrease?
> 
> Do I take it that there is nothing wrong in fact perhaps something
> right in using ORC_CODE=emulate on production systems?

Perhaps ORC_CODE=backup is better in that case?

Can't you add an SELinux exception/rule ?

Cheers
 -Tim