Hi!
On Mon, Nov 10, 2008 at 12:31:17PM +0100, [EMAIL PROTECTED] wrote:
> Question is: do you use a hardened toolchain pie-ssp enabled, or a
> regular? It would be interesting to test it using a non-hardened userland
> with a grsec-enabled kernel...
I use hardened toolchain, but it's ease to test with non-hardened:
home ~ # gcc-config -l
[1] i686-pc-linux-gnu-3.4.6 *
[2] i686-pc-linux-gnu-3.4.6-hardenednopie
[3] i686-pc-linux-gnu-3.4.6-hardenednopiessp
[4] i686-pc-linux-gnu-3.4.6-hardenednossp
[5] i686-pc-linux-gnu-3.4.6-vanilla
home ~ # gcc-config 5
home ~ # source /etc/profile
home ~ # emerge perl coreutils
...
No, that doesn't change anything. The
perl -e 'exec $ARGV[0]' /bin/pwd
is still report in kernel log:
2008-11-10_12:22:46.77911 kern.alert: grsec: denied resource overstep by
requesting 164823040 for RLIMIT_STACK against limit 8388608 for
/bin/pwd[pwd:25759] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:1828]
uid/euid:0/0 gid/egid:0/0
--
WBR, Alex.
