OS Manuals

/usr/bin/paxmark

update PaX markings on binaries run under PaX-capable kernels

From paxmark 0.1.0-r49 (os), captured 2026-11-05 by running paxmark --help (exit 0). permalink

paxmark - a utility for setting PaX markings on binaries

Usage:
% paxmark -[pP|eE|mM|rR|sS] <binary>

Each letter corresponds to a PaX feature flag, upper case
enabling and lower case disabling.

This utility will clear out invalid marks and explicitly set
enabled for missing marks, matching defaults.

-p|P    PAGEEXEC: use NX-bit to mark unexecutable pages
-e|E    EMUTRAMP: emulate stack trampolines
-m|M    MPROTECT: write-xor-execute in mmap/mprotect(2) syscalls
-r|R    RANDMMAP: address space layout randomization (ASLR)
-s|S    SEGMEXEC: segmentation-based NX-bit emulation

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.