Public SourceMage Discussion List

[Eric Sandall <eric AT sandall.us>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 20 Sep 2005, Thomas HOUSSIN wrote:
> Hi all,
>
> You may have heard about the hardened grimoire. The goal of this
> grimoire is to add various security features to Source Mage : for
> example support of Stack Smashing Protector (
> http://www.trl.ibm.com/projects/security/ssp/), full support of
> grsecurity, PaX, etc. See
> http://wiki.sourcemage.org/index.php?page=Hardened+Grimoire for more
> about it.
>
> I began to work on this a while ago. I didn't change anything in
> perforce for a long time, but installed a test machine (which I didn't
> have anymore) and tested lots of spells (including kde, gnome, etc). I
> didn't notice any major problems ; next step now would be to integrate
> this work in the devel grimoire. This would bring nice new features,
> but also more work and bugs reports, especially at the beginning (and
> especially I guess the non-executable pages feature in PaX), more than
> security team alone can handle. So the question is : do you want
> some/all of these features in devel, and which ones ?

As long as they default to not being used they can all go into devel
now as-is and, hopefully, developers with some time/interest in this
can try them out, file and fix bugs, etc.

Thanks for getting most of that together Thomas. :)

- -sandalle

- --
Eric Sandall                     |  Source Mage GNU/Linux Developer
eric AT sandall.us                  |  http://www.sourcemage.org/
http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDMEC7HXt9dKjv3WERAkrRAJ4qU4ueH44YPJm+/hAXhCoLuW70jgCeMhA3
veGUAdxaONNCx2msAF5Xn80=
=nMkh
-----END PGP SIGNATURE-----