Re: Secure 2.4.x kernel - stack

[Alvin Oga <aoga@Maggie.Linux-Consulting.com>]

hi ya
 
> Also, when you look at how memory is laid out, having two stacks 
> is problematic. Under linux, it looks like this:
> 
>     --------         -------
>    | KERNEL |       | stack | <---- grows downward
>    |--------|        -------
>    |        |
>    |  user  | ---->  -------
>    |        |       |  brk  | <---- grows upward
>     --------         -------

http://www.cse.ogi.edu/DISC/projects/immunix/StackGuard/usenixsc98_html/node5.html

kernel security patches/additions...
	http://www.Linux-Sec.net/Harden/kernel.gwif.html

have fun
alvin
http://www.Linux-Sec.net

> Stacks, in general, grow downward. So you'd need to further 
> split the process memory area, leaving even less precious 
> address space for malloc and friends. Even if you could make one 
> grow upward (PowerPC, for example, doesn't know about the stack) 
> you'd have to worry about collisions again.
....