xen-devel

[Top] [All Lists]

[Xen-devel] Re: -fpie or ssp (IBM stack hardening)

from [voices]

[Permanent Link][Original]

To:	xen-devel@xxxxxxxxxxxxxxxxxxxxx
Subject:	[Xen-devel] Re: -fpie or ssp (IBM stack hardening)
From:	voices <voices@xxxxxxxxxxxxxxxx>
Date:	Wed, 09 Feb 2005 21:03:08 +0100
Delivery-date:	Wed, 09 Feb 2005 23:32:54 +0000
Envelope-to:	xen+James.Bulpin@xxxxxxxxxxxx
In-reply-to:	<420A6E75.60203@xxxxxxxxxx>
List-archive:	<http://sourceforge.net/mailarchive/forum.php?forum=xen-devel>
List-help:	<mailto:xen-devel-request@lists.sourceforge.net?subject=help>
List-id:	List for Xen developers <xen-devel.lists.sourceforge.net>
List-post:	<mailto:xen-devel@lists.sourceforge.net>
List-subscribe:	<https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe:	<https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=unsubscribe>
References:	<1107957106.9884.192.camel@xxxxxxxxxxxxxxxxxxx> <420A6E75.60203@xxxxxxxxxx>
Reply-to:	voices@xxxxxxxxxxxxxxxx
Sender:	xen-devel-admin@xxxxxxxxxxxxxxxxxxxxx
User-agent:	Mozilla Thunderbird 1.0 (Windows/20041206)

Jerome Brown wrote:

B.G. Bruce wrote:

Has anyone looked into how compatible XEN is with pie (-fpie) or ssp?


Yes, I've tried it on gentoo-hardened with PIE(ET_DYN)/SSP.
I works without any problems.

But .. Is there any other purpose in compiling the system as PIE, otherthan for using PaX ?

Unfortunately, nobody is porting PaX to XEN ... very bad, especially ifwe're talking about secure systems.


Lack of PaX for XEN prevents me from using xen on my servers.

--
voices (at) metallicrain (dot) com



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-devel] -fpie or ssp (IBM stack hardening), B.G. Bruce Re: [Xen-devel] -fpie or ssp (IBM stack hardening), Jerome Brown [Xen-devel] Re: -fpie or ssp (IBM stack hardening), voices <=

Previous by Date:	[Xen-devel] Re: XenCD 1.0rc01 available, Paul Ionescu
Next by Date:	[Xen-devel] Re: migration question, Roland
Previous by Thread:	Re: [Xen-devel] -fpie or ssp (IBM stack hardening), Jerome Brown
Next by Thread:	[Xen-devel] tools/vnet build issues and a patch to fix part, B.G. Bruce
Indexes:	[Date] [Thread] [Top] [All Lists]