Re: Buffer overflow prevention

[noir <noir () gsu linux org tr>]

I believe that Mr. Raadt meant PAX by W^X. 
We all enjoy ascii art but I wanted to note that renaming somebody 
elses work is not so ethical.

so for the real thing please consider checking: 
http://pageexec.virtualave.net/

my linux box have 0 remotely exploitable vulnerabilities in its default 
install since the begining of time and space. thanks to segmentation, ASLR 
from the PAX project.

Thanks,
- noir

-----Original Message-----
From: Theo de Raadt [mailto:deraadt () cvs openbsd org] 
Sent: Thursday, August 14, 2003 12:37 PM
To: Mariusz Woloszyn
Subject: Re: Buffer overflow prevention 

> I believe the best protection (at this time) is to combine ProPolice 
> with a W^X technology.