Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-dev
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-dev@g.o
From: Mike Frysinger <vapier@g.o>
Subject: Re: Moving more hardening features to default?
Date: Thu, 20 Oct 2011 13:17:33 -0400
On Thursday 20 October 2011 12:47:27 Rich Freeman wrote:
> I was trying to draw a contrast between passive things like
> stack-protection and things that really get in your face like MAC.

the trouble was in the context quoting then ... it sounded like you were 
proposing PaX by default

i am a fan of things that "just work" though which is why i was happy to merge 
the fortify source code.  most of that checking is done at compile time, so 
the runtime overhead is generally small.  and in terms of packages that did 
break, it was (more often than not) because they were broken already but we 
never noticed.
-mike
Attachment:
signature.asc (This is a digitally signed message part.)
Replies:
Re: Moving more hardening features to default?
-- Magnus Granberg
References:
Moving more hardening features to default?
-- Paweł Hajdan, Jr.
Re: Moving more hardening features to default?
-- Anthony G. Basile
Re: Moving more hardening features to default?
-- Rich Freeman
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: Moving more hardening features to default?
Next by thread:
Re: Moving more hardening features to default?
Previous by date:
Re: Moving more hardening features to default?
Next by date:
Re: huse: new helper for low level eclass writers


Updated Jun 29, 2012

Summary: Archive of the gentoo-dev mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.