Re: [gentoo-hardened] Ports Security

[Ned Ludd]

At one point I had plugged flawfinder support into my ebuild.sh
dyn_unpack() function, but it produced so much crap that I found it
somewhat useless. I've also have giving a little thought into plugging
in some elf fuzz checkers into the dyn_install() function of ebuild.sh
as well, but have yet to find a decent one.
As for the rest of the stuff, well I just cant stomach to read another 
openbsd propaganda page, so if anybody would like to sum up exactly what
feature they desire to see then I'm sure we can add it to the TODO list.


On Fri, 2003-09-05 at 14:02, Alexander Gabert wrote:
> yeah,
>
> we should think about source-parsing function pointer bounds checkers
> and formatstring checkers to round up our efforts in respect to the
> linear overflow protection provided by the propolice support (SSP) and
> the process randomization of dynamic PIC binaries by PaX.
>
> if you want we can discuss it in the channel #gentoo-hardened on
> freenode what solutions are available currently and how hard it would be
> to update portage (similar approach like the antivirus scanning prep'd
> by solar some time ago)
>
> HTH,
>
> Alex
>
> On Fri, 2003-09-05 at 21:53, Jan Krueger wrote:
> > Hi,
> >
> > is there a guide like
> > http://www.openbsd.org/porting.html#Security
> > in progress? available?
> >
> > Or even better tools bundled in a "esecurity_check":
> >
> > src_unpack() {
> >         blabla
> >         unpack
> >         epatch
> >         blabla
> >
> >         # check unpacked and patched source tree for security issues
> >         # like in http://www.openbsd.org/porting.html#Security
> >         esecurity_check || die
> > }
> >
> > ? Something like that? In progress? Or even ready for testing?
> > already finished? Someone just forgot to mention? I was to blind to see?
> >
> > Gruß
> > Jan
> >
> >
> > --
> > gentoo-hardened@g.o mailing list
> >
> >
>
>
>
> --
> gentoo-hardened@g.o mailing list
-- 
RSA key ID 2BC75196			http://keyserver.net
Gentoo Linux Developer (Hardened)	http://dev.gentoo.org/~solar