Re: exec-shield (maybe ITP kernel-patch-exec-shield)
-----BEGIN PGP SIGNED MESSAGE-----
On Mon, Nov 03, 2003 at 02:49:37AM +1100, Russell Coker wrote:
> It seems that exec-shield does 99% of what PaX does (PaX is the most desirable
> feature in GRSec). Exec-shield also has support for 2.6 and looks like it
> will be a standard feature in Red Hat.
I don't know exec-shield that good, but i think it may be better to not
only test it one or 2 days. So, let's look how it works for RedHat and
provide an kernel-patch package (my suggestion).
> If adding exec-shield to the Debian kernel is not considered a good idea then
> I'll create a kernel-patch package for exec-shield, which will still remove
> the need to make grsec work with the Debian kernel.
Even if it has some features which are nice, grsec provides a few more.
It would be nice to have a working grsec Patch in Debian.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
-----END PGP SIGNATURE-----