From owner-freebsd-hackers Sat Aug 22 22:15:38 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA29883 for freebsd-hackers-outgoing; Sat, 22 Aug 1998 22:15:38 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id WAA29872 for ; Sat, 22 Aug 1998 22:15:35 -0700 (PDT) (envelope-from imp@village.org) Received: from harmony [10.0.0.6] by rover.village.org with esmtp (Exim 1.71 #1) id 0zASUN-000572-00; Sat, 22 Aug 1998 23:14:51 -0600 Received: from harmony.village.org (localhost [127.0.0.1]) by harmony.village.org (8.8.8/8.8.3) with ESMTP id XAA18500; Sat, 22 Aug 1998 23:15:56 -0600 (MDT) Message-Id: <199808230515.XAA18500@harmony.village.org> To: David Kelly Subject: Re: I want to break binary compatibility. Cc: "B. Richardson" , hackers@FreeBSD.ORG In-reply-to: Your message of "Fri, 21 Aug 1998 21:40:30 CDT." <199808220240.VAA16809@nospam.hiwaay.net> References: <199808220240.VAA16809@nospam.hiwaay.net> Date: Sat, 22 Aug 1998 23:15:56 -0600 From: Warner Losh Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message <199808220240.VAA16809@nospam.hiwaay.net> David Kelly writes: : > I have a problem with some hackers that are obsessed with making my : > ISP's life miserable (they've already hacked our SGI). I've slapped : > together a FreeBSD box to throw their webpages on it, turned off all : > services except http. : : While you are at it and breaking binary compatibility for security : reasons, make sure you remove stuff a webserver doesn't need such as : /usr/include, compilers, manpages, etc. Maybe PicoBSD would be the : place to start? You are better off NOT breaking binary compatibility to get what you want. You would be better served by porting StackGuard to FreeBSD, which would give you excellent protection against most stack overflows. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message