From owner-freebsd-security  Sun May  5 23:32:13 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mta3-rme.xtra.co.nz (mta3-rme.xtra.co.nz [210.86.15.131])
	by hub.freebsd.org (Postfix) with ESMTP id 680F337B404
	for <freebsd-security@FreeBSD.ORG>; Sun,  5 May 2002 23:32:09 -0700 (PDT)
Received: from netxsecure.net ([210.55.243.112]) by mta3-rme.xtra.co.nz
          with ESMTP
          id <20020506063207.BVII7031.mta3-rme.xtra.co.nz@netxsecure.net>;
          Mon, 6 May 2002 18:32:07 +1200
Message-ID: <3CD62388.C52BC087@netxsecure.net>
Date: Mon, 06 May 2002 18:32:40 +1200
From: "Michael A. Williams" <mike@netxsecure.net>
Reply-To: mike@netxsecure.net
X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.4-RELEASE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: andy@sambolian.net.nz
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: Updated Anti-Trojan kernel patches for FreeBSD 5.0 DP1
References: <3CD6100D.1BC0890@netxsecure.net> <20020506051720.GA36741@elvis.mu.org> <1020663565.3cd6170d34fc7@webmail.sambolian.net.nz>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Correct, thanks Andrew.

BTW without an available SMP for testing I am not convinced that this
will behave correctly in an SMP kernel and am almost certain that it
will not make good use of SMP.
But that is getting away from security.

Cheers,
Mike.

andy@sambolian.net.nz wrote:
> 
> I think this is what you are after.
> 
> http://www.trojanproof.org/sigexec.pdf
...

> Quoting Alfred Perlstein <bright@mu.org>:
...

> > > Updated kernel option signed_exec patches for FreeBSD 5.0 DP1 Developer
> > > Preview One are available from:
...

> > For the completely lazy amongst us, can you please provide a url
> > that _explains_ what these patches do? :)
> >
> > -Alfred

-- 
Michael A. Williams
Security Software Engineering and InfoSec Manager
NetXSecure NZ Limited, http://www.nxs.co.nz
Ph: +64.3.318.2973 Fax: +64.3.318.2975 Mob: +64.21.995.914


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message