Full Disclosure mailing list archives
Linux Exec Shield (was: Linux (in)security)
From: Chris Ruvolo <chris+fulldisc () ruvolo net>
Date: Wed, 22 Oct 2003 15:27:17 -0700
On Wed, Oct 22, 2003 at 10:16:02AM -0700, Edward W. Ray wrote:
Linux is the hands of someone with no interest or regard for security is the same as Windows or any other OS in the hands of the same clueless individual. The main difference between the Linux and Unix variants (i.e. BSD, Solaris, HP-UX) is that they have already learned their lesson regarded buffer overflows and kernel hardening and allowed the user more control in securing their systems. M$ has not, and that is unfortunate.
Speaking about kernel hardening, I was wondering if anyone on the list could comment on Ingo Molnar's Exec Shield Linux kernel patches. How effective do you think they are? Would it actually make some holes more difficult to exploit? Impossible to exploit? Obviously its not a 100% blanket protection against buffer overflows (as acknowledged by the author), but does anyone here think it could be worthwhile? Details and patches are here: http://people.redhat.com/mingo/exec-shield/ANNOUNCE-exec-shield http://people.redhat.com/mingo/exec-shield/ Thanks, -Chris
Attachment:
_bin
Description:
Current thread:
- Re: [inbox] Re: RE: Linux (in)security, (continued)
- Re: [inbox] Re: RE: Linux (in)security Shawn McMahon (Oct 24)
- RE: [inbox] Re: RE: Linux (in)security Arcturus (Oct 23)
- Re: [inbox] Re: RE: Linux (in)security Peter Busser (Oct 24)
- Re: [inbox] Re: RE: Linux (in)security Shawn McMahon (Oct 24)
- Re: [inbox] Re: Linux (in)security Chris Ruvolo (Oct 24)
- Re: [inbox] Re: RE: Linux (in)security Valdis . Kletnieks (Oct 24)
- Re: [inbox] Re: RE: Linux (in)security Henning Brauer (Oct 30)
- Re: RE: Linux (in)security Ron DuFresne (Oct 23)
- Re: RE: Linux (in)security Peter Busser (Oct 23)
- Re: RE: Linux (in)security Ron DuFresne (Oct 23)
- Linux Exec Shield (was: Linux (in)security) Chris Ruvolo (Oct 23)
- Re: Linux Exec Shield (was: Linux (in)security) Peter Busser (Oct 23)
- Re: Linux Exec Shield (was: Linux (in)security) Arjan van de Ven (Oct 23)
- Re: Linux Exec Shield (was: Linux (in)security) Chris Ruvolo (Oct 24)
- Re: RE: Linux (in)security I.R. van Dongen (Oct 22)
- Re: RE: Linux (in)security Robert Brockway (Oct 22)
- Re: RE: Linux (in)security madsaxon (Oct 23)
- Re: RE: Linux (in)security Ron DuFresne (Oct 23)