Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-05 Thread cobaco
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2003-11-03 17:20, Russell Coker wrote: On Mon, 3 Nov 2003 23:42, [EMAIL PROTECTED] wrote: Maybe we should solve the debate about grsec and standard kernels by adding exec-shield to the standard Debian kernel source? Go ahead and do it.

Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-05 Thread Russell Coker
On Tue, 4 Nov 2003 21:29, cobaco wrote: The exec-shield patch applies with the Debian patches and with LSM. I am prepared to maintain it. Unless someone volunteers to maintain PaX support for Debian kernels then the best available option for Debian users will be exec-shield. hm, the

Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-04 Thread Manoj Srivastava
On Mon, 3 Nov 2003 07:42:27 -0500, spender [EMAIL PROTECTED] said: Go ahead and do it. I could frankly care less if your users get owned. There's another exploitable bug in Exec-shield that I've known of for months. Maybe you'll find it after you put it into Debian. Maybe not. This

Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-04 Thread Richard Braakman
On Mon, Nov 03, 2003 at 07:42:27AM -0500, [EMAIL PROTECTED] wrote: Go ahead and do it. I could frankly care less if your users get owned. In that case it seems safer to avoid using any software you helped to develop. Richard Braakman

Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-03 Thread Andrew Suffield
On Mon, Nov 03, 2003 at 07:42:27AM -0500, [EMAIL PROTECTED] wrote: There's another exploitable bug in Exec-shield that I've known of for months. Maybe you'll find it after you put it into Debian. Maybe not. Suddenly I don't feel inclined to believe *anything* this guy says. -- .''`.