Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
List Archive: gentoo-security
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Stephen Clowater wrote:
| Compiling from stage 1 is a very important step, by compiling everythig,
| and by turning on the memory randomization features in GRsecurity
| (random mallac() base as a _very_ good one that I sorly miss on 2.6.0 as
| I wait like a 18 year old girl on prom night for the 2.6.0 GRsecurity
| patch :)) you will do alot to protect yourself.
Actually that's wrong. The system call is changed in the kernel, so
regardless of whether or not the program was compiled/linked before or
after it will have the same effect. malloc() will return an integer
that's more random then before.
You could put grsecurity kernel on a stock redhat box, and still benefit
as much as recompiling everything from scratch.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
iD8DBQFANElX1mDajpZ9rHwRAtJIAJ9tgFopsjGTfSyjQOjimFjKpbmWIwCg2tDh
K7zzKhtwY196GoeIf+gzJKg=
=MUrP
-----END PGP SIGNATURE-----
--
gentoo-security@g.o mailing list
|
|