This all looks good to me. The one thing I wonder about changing: > By default, the stack has READ, WRITE, and EXECUTE permissions. The EXECUTE > setting exists for historical reasons. It is rarely if ever needed and is > generally considered to be a potential security risk. Removing EXECUTE > permission from the stack is a recommended practice: > > STACK { > FLAGS -= EXECUTE; > };
Is there any reason to not just say "If you're using a version 2 mapfile, stack is non-executable by default, and you have to explicitly add it in the very few cases it's needed" ? -- -Alan Coopersmith- alan.coopersmith at sun.com Sun Microsystems, Inc. - X Window System Engineering