RE: Planning v1.2.0

From: "Kaladis" <kaladis@gmx.de>
Subject: RE: Planning v1.2.0
Date: Wed, 11 Jul 2001 20:14:41 +0200

Next Article (by Date): Planning v1.2.0 owner-rsbac@compuniverse.de [mailto:owner-rsbac@compuniverse.de]On
Previous Article (by Date): RE: RSBAC suggestions / Problems "Kaladis"
Top of Thread: Planning v1.2.0 Amon Ott
Next in Thread: Planning v1.2.0 owner-rsbac@compuniverse.de [mailto:owner-rsbac@compuniverse.de]On
Articles sorted by: [Date] [Author] [Subject]

I think that it would be very cool if RSBAC would be able to fix one big
problem: buffer overflows:

So far I am aware of 3 types of overflows:
The ones execing in the stack or heap
The ones that return to PLT
The ones that return in libc

So far I was able to fix 1 and 3 of that list by taking use of Libsafe
(which is LD_PRELOADED before every binary) and PaX to set the stack and the
heap to non-exec. Setting Data and BSS to non-exec would be the next step in
PaX development.

Go to Compuniverse LWGate Home Page.