Re: Linux hardening

> $ mount
> $ cd /tmp
> $ mount |grep tmp
> tmpfs on /dev/shm type tmpfs (rw,noexec,nosuid,nodev)
> /dev/hda5 on /tmp type ext3 (rw,noexec,nosuid,nodev)
> $ cat test.c
> int main() {
>    printf("Test\n");
>    exit(0);
> }
> $ gcc -o test test.c
> $ ./test
> bash: ./test: Permission denied
> $ /lib/ld-linux.so.2 ./test
> ./test: error while loading shared libraries: ./test: failed to
> map segment from shared object: Operation not permitted
> 

<http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033305.html>
works with 2.6.12 but haven't tried on 2.6.13 

If you really want to harden linux, by all means use PaX+Grsecurity+SSP.
PaX is better and mature than Redhat's execshield.. or OpenBSD's stackgap/w^x
But don't take my word for it <http://pax.grsecurity.net/docs/index.html>

--ed