Re: Secure Linux From Scratch

On Wed, Dec 24, 2003 at 01:52:26AM +0200, Christos Gioran wrote:
> 
> In fact, although libsafe's whitepaper claims that way, Immunux's whitepaper 
> on StackGuard at the GCC procedings of 2003 notes that libsafe imposes some 
> overhead (more than stackguard-propolice anyway) in string functions, whereas 
> it is function calls that libsafe overthrows stackguard. Both have 
> performance hit, but it is in both cases minimal. Certainly it is worth it. 
> Should these points be added to the book? (yes if you ask me, thought I asked 
> though, in case someone has reasons to suggest otherwise)

Both should be mentioned regardless of performance hits for the simple
reason that you never want to count on one wall of safety when two can
be had. Another example would be a home user being reckless just because
they are behind a firewall. All fine and good until that one layer is
pierced.

-- 
Archaic

The Constitution is not neutral. It was designed to take the government
off the backs of the people.

- Justice William O. Douglas

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page