Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Oct 2005 21:58:42 +0200
From:      Jimmy Scott <jimmy@inet-solutions.be>
To:        db <db@traceroute.dk>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Non-executable stack
Message-ID:  <20051027195842.GA19013@ada.devbox.be>
In-Reply-To: <200510271511.36004.db@traceroute.dk>
References:  <200510270608.51571.db@traceroute.dk> <1130394931.43607533be6d7@webmail.boxke.be> <200510271511.36004.db@traceroute.dk>

next in thread | previous in thread | raw e-mail | index | archive | help

--lrZ03NoBR/3+SXJZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Oct 27, 2005 at 03:11:35PM +0000, db wrote:
> On Thursday 27 October 2005 06:35, you wrote:
>=20
> > http://www.research.ibm.com/trl/projects/security/ssp/buildfreebsd.html
> >
> > The patch should be for 5.x in general, I don't use it anymore since so=
me
> > ports will break, if you play with it you can disable it by default and
> > enable it explicit when you are willing to compile a binary with it.
>=20
> Ok thanks, but I was looking for a kernel level patch. Btw which ports wi=
ll=20
> break?
>=20

I did not keep a list, but as far as I remember, the 'pure-pw' binary
from pure-ftpd was the last thing that failed. Because it was not
visible in first place (the port builded fine), I decided the risk of
breaking things without noticing it was not worth it.

I don't mean that it's a bad thing, but it will cost you some time to
find the bugs, report the bugs and get them fixed. And if you are
willing to use it in a production environment, you have to fully test
the software eacht time you are upgrading to be sure things will not
break. It's also not officially supported as far as I know.

Kind regards,
Jimmy Scott

--=20
People usually get what's coming to them ... unless it's been mailed.

--lrZ03NoBR/3+SXJZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (OpenBSD)

iD8DBQFDYTFygDLTDEgDPT0RAlh4AJ0ccvAUXpHciDwEM8UEe9fMq8CAPQCeK+lE
ExjtwwBMk2F/bkM0iD7HA3E=
=6oQq
-----END PGP SIGNATURE-----

--lrZ03NoBR/3+SXJZ--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051027195842.GA19013>