lkml.org 
[lkml]   [1997]   [Dec]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: two things
    On 18 Dec 1997, Benny Amorsen wrote:

    > >>>>> "CSA" == C Scott Ananian <cananian@lcs.mit.edu> writes:
    >
    > CSA> My understanding is that the current nonexec-stack patch works so
    > CSA> well because it cleverly disables itself when it detects code
    > CSA> that will break. Although this does make it compatible, it
    > CSA> doesn't make it secure. Solutions to these problems have been
    > CSA> rumoured for Linux 2.3.X.
    >
    > We should not fix the problem in the case where it _can_ be solved,
    > just because there are cases where it cannot?

    If it is trivial to disable the patch, it doesn't make anything
    really more secure now, does it? And it lulls one into a false sense of
    security.

    Besides: no one is saying you can't patch your own kernels. But the
    official linux kernel distribution is concerned (rightly) with doing
    things the Right Way, even if it takes a bit longer to get it done.
    --Scott
    @ @
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-oOO-(_)-OOo-=-=-=-=-=
    C. Scott Ananian: cananian@lcs.mit.edu / Declare the Truth boldly and
    Laboratory for Computer Science/Crypto / without hindrance.
    Massachusetts Institute of Technology /META-PARRESIAS AKOLUTOS:Acts 28:31
    -.-. .-.. .. ..-. ..-. --- .-. -.. ... -.-. --- - - .- -. .- -. .. .- -.
    PGP key available via finger and from http://www.pdos.lcs.mit.edu/~cananian


    \
     
     \ /
      Last update: 2005-03-22 13:40    [W:0.019 / U:1.332 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site