Re: Stack-smashing protection

[Alvin Oga <aoga@Maggie.Linux-Consulting.com>]

On Mon, 9 Dec 2002, martin f krafft wrote:

> also sprach Albert Cervera Areny <albertca@jazzfree.com> [2002.12.06.2129 +0100]:
> > I think it would be a great idea to use this patch with debian too as soon as 
> > gcc becomes the compiler by default. Protecting the entire system from this 
> > kind of bugs would really be a great security step forward.

gcc is already the compiler by default ...

and you can use stackguard to tighten gcc
	- better still, write better code ??

> have a look at grsecurity.net, which i think implements this at
> a lower cost.

and the rest of the dozen+ kernel hardening tools
	http://www.linux-sec.net/Harden/kernel.gwif.html

c ya
alvin