Re: Secure Linux From Scratch

On Monday 15 December 2003 11:17 am, Christos Gioran wrote:
>       One final note: I installed libsafe following the ideas of a previous 
post
> on this thread. As far as I can tell it is still actively developed and is
> a very good security measure to have lying around. If it is going to be
> included in a SLFS approach, would building the SUID binaries statically
> have a meaning? 

Libsafe checks for dangerous functions at runtime. Source for suid programs 
can be checked with Rats (a source code checker) for these dangerous 
functions before they are built. Libsafe checks for well known problems, I 
should hope our suid code doesn't have known dangerous code. Its best to 
check anyway.

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page