Re: Secure Linux From Scratch

On Fri, Dec 19, 2003 at 02:54:15PM -0500, ashes wrote:
> 
> Personaly I have no interest in testing the gcc-3.3 method because I
> know it will become obsolete in the not to distant future. If anyone
> else wants to get gcc-3.3's et_dyn working feel free.

I agree. This is much like NPTL. While the work on this is not currently
implemented, by the time 3.4 is ready, the instructions can be ready
for easy drop-in and go. 

> I think that implies we have to try to break every aspect of the
> system, and don't issue a release untill is passes any torture we can
> cook up.

Which also implies a test-bed like document that decribes how we are
attempting to break in. That way, we are all on the same page and it
would be easier for someone to read it and say, "Hey! You forgot about
this little trick".

-- 
Archaic

Government is actually the worst failure of civilized man. There has
never been a really good one, and even those that are most tolerable are
arbitrary, cruel, grasping and unintelligent.

- H. L. Mencken

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page