Re: [gentoo-hardened] Ports Security

[Alexander Gabert]

yeah,

we should think about source-parsing function pointer bounds checkers
and formatstring checkers to round up our efforts in respect to the
linear overflow protection provided by the propolice support (SSP) and
the process randomization of dynamic PIC binaries by PaX.

if you want we can discuss it in the channel #gentoo-hardened on
freenode what solutions are available currently and how hard it would be
to update portage (similar approach like the antivirus scanning prep'd
by solar some time ago)

HTH,

Alex

On Fri, 2003-09-05 at 21:53, Jan Krueger wrote:
> Hi,
>
> is there a guide like
> http://www.openbsd.org/porting.html#Security
> in progress? available?
>
> Or even better tools bundled in a "esecurity_check":
>
> src_unpack() {
>         blabla
>         unpack
>         epatch
>         blabla
>
>         # check unpacked and patched source tree for security issues
>         # like in http://www.openbsd.org/porting.html#Security
>         esecurity_check || die
> }
>
> ? Something like that? In progress? Or even ready for testing?
> already finished? Someone just forgot to mention? I was to blind to see?
>
> Gruß
> Jan
>
>
> --
> gentoo-hardened@g.o mailing list
>
>



--
gentoo-hardened@g.o mailing list