-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Fri, Nov 25, 2016 at 09:08:03PM -0800, jkitt wrote: > The point is that the security of a grsecurity protected system depends on > the userspace being compiled in a special way. The binaries need to be > compiled with pie, and shared objects need to be compiled with pic. There are > also some other mitigations like SSP.
Shared objects are always compiled as pic, these days. As for pie executables - I think most distributions do this only for selected binaries only. > A grsecurity kernel on it's own is not adequate enough. Someone will need to > distribute a hardened userspace. > > The coldhaka kernel is in alpha. It's a start but not a solution. > - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJYOWr8AAoJENuP0xzK19csNYoH/iaSyiPdIK0quLx1nu3WaB1A kgqEkY2W9/JIjprX7di8POL9xOSs6m0S7GAlefuhj4XOtY2vJSbfnaBt3AkKUK/9 G0x9o6UdmbjeiXPqGDEvHi0PfKdVer138IkdcgvFmBp9WAj0mgJdq1cKrZ9VfV8s dBwX6R2uJkQ/F/EXaSuDNqy9xmI3x5Ea96pCQ8bcocj+7gSUzsVxl9F7Zkni3nUU 9ffnoxlzNMoxvqzi+liRCnwSYplNdcKkhIIJ/d/8Lz0ibyTjxkBPZFmUXYw6AKlr +FK7wrD1ODYBeYEAcHEYpU3rmUkpmvErwR2PH5ZL9BpNZ8rp5z+NhJLSldQ72kM= =lyTt -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20161126105907.GJ1145%40mail-itl. For more options, visit https://groups.google.com/d/optout.
