[Full-disclosure] What RedHat doesn't want you to know about ExecShield (without NX)

Brad Spengler spender at grsecurity.net
Mon May 14 22:37:39 BST 2007


> Now if you want to discuss the execshield implementation that's 
> currently shipping in FC6 or the about-to-escape FC7, we'll be more 
> than happy to listen.

Hello hotshot,

In fact I was discussing the execshield implementation that's currently 
shipping in FC6 and the about-to-escape FC7, and you weren't more than 
happy to listen.  The comment about FC3 was in addition to the 
still-present issues I discussed and was mentioned in the same area 
since I noted the PIE binary non-determinism at the same time.
Maybe you should read first, and open your mouth afterwards.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070514/cd29a3e1/attachment.bin 


Full-Disclosure is hosted and sponsored by Secunia.