Gentoo Archives: gentoo-hardened

From: Javier Barrio <coder@×××××.org>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] GOT protection
Date: Tue, 17 Oct 2006 15:13:07
Message-Id: 20061017171212.6a3b2a52@sloth
In Reply to: [gentoo-hardened] GOT protection by Alejo Sanchez
1 > Now to the question. I was wondering if there is a way to protect GOT
2 > (besides having ET_DYN) in the way OpenBSD does
3 > (http://undeadly.org/cgi?action=article&sid=20030126143902). If not,
4 > what would you think on a similar patch for Hardened?
5
6 Mmm, I think that can be (partially) protected passing -z relro to the
7 gnu linker, making RELRO segment read-only after symbol resolution.
8
9 --
10 echo "dpefsAgmv{p/psh" | perl -pe 's/(.)/chr(ord($1)-1)/ge'
11 GnuPG key ID 0x6D2FF8B5 @ pgp.rediris.es
12 Gentoo Linux on IA32|sparc64
13 http://fluzo.org/

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] GOT protection Alejo Sanchez <alejos@×××××.com>