I sincerely doubt it. I myself get a paywall when trying to get the RAP kernel patches. Where is the public version? Its hard to find. If @paxteam wants RAP to become a mainstream academic reference, they should release a PoC code for public evaluation and write a detailed paper.

So, I've set out to evaluate RAP this morning, comparing RAP with LLVM-CFI. I've searched for the RAP download for 30min but did not find an open (or even binary) version of the RAP gcc plugin for user-space.

Did you look here? grsecurity.net/~paxguy1/pax-…

That's a kernel patch and not the GCC plugin that does the analysis / adds the instrumentation.

The plugin is in the kernel patch (just like other Linux plugins). Check inside: linux-4.9.24/scripts/gcc-plugins/rap_plugin

Hm, interesting. As soon as I get a real version with a little bit of documentation to test, I'll look into it. Extracting files from a partial patch is not how I usually evaluate other prototypes

Hm, there is no config option to build the RAP plugin. This is advanced software archaeology where I reverse engineer a plugin that is hidden in a partial kernel patch without any form of documentation. This software would fail any artifact evaluation.

To be fair, anything out of mainline Linux kernel is a horrific maintenance tire fire *by design*, it's how the system gets things polished into the mainline kernel.

Like, yes, this is bullshit, but it's *normalized* bullshit on a much larger scale than this one plugin.

My point is that @paxteam has no basis or justification to yell at academics for not evaluating RAP if it simply cannot be evaluated reasonably.