Re: chrooting daemons
> It might be even easier to link the daemon statically. It's not going to
> be able to share its libraries with any other program anyway.
Linking them statically may open other security holes: there are
bugs found in the libraries. Fixing the libc bugs will then also
require the system admin to re-link all those statically linked daemons,
and I'm sure some will be overlooked quite easily.
> Of course, that means that sites that want that kind of security will have
> to compile the daemons themselves.
And re-compile.
--
joost witteveen, joostje@debian.org
#!/usr/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
#what's this? see http://www.dcs.ex.ac.uk/~aba/rsa/
Reply to: