Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] A few words about hardened grimoire

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Eric Sandall <eric AT sandall.us>
  • To: Thomas HOUSSIN <thomas.houssin AT gmail.com>
  • Cc: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] A few words about hardened grimoire
  • Date: Tue, 20 Sep 2005 10:02:49 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 20 Sep 2005, Thomas HOUSSIN wrote:
Hi all,

You may have heard about the hardened grimoire. The goal of this
grimoire is to add various security features to Source Mage : for
example support of Stack Smashing Protector (
http://www.trl.ibm.com/projects/security/ssp/), full support of
grsecurity, PaX, etc. See
http://wiki.sourcemage.org/index.php?page=Hardened+Grimoire for more
about it.

I began to work on this a while ago. I didn't change anything in
perforce for a long time, but installed a test machine (which I didn't
have anymore) and tested lots of spells (including kde, gnome, etc). I
didn't notice any major problems ; next step now would be to integrate
this work in the devel grimoire. This would bring nice new features,
but also more work and bugs reports, especially at the beginning (and
especially I guess the non-executable pages feature in PaX), more than
security team alone can handle. So the question is : do you want
some/all of these features in devel, and which ones ?

As long as they default to not being used they can all go into devel
now as-is and, hopefully, developers with some time/interest in this
can try them out, file and fix bugs, etc.

Thanks for getting most of that together Thomas. :)

- -sandalle

- --
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDMEC7HXt9dKjv3WERAkrRAJ4qU4ueH44YPJm+/hAXhCoLuW70jgCeMhA3
veGUAdxaONNCx2msAF5Xn80=
=nMkh
-----END PGP SIGNATURE-----




Archive powered by MHonArc 2.6.24.

Top of Page