Re: Solaris security extensions

[maya%NetBSD.org@localhost]

On Wed, May 27, 2020 at 08:31:51AM +0100, Sad Clouds wrote:
> Not quite sure what those linking errors actually mean, but wouldn't it
> be easier not to use those flags? Solaris has good support for Zones,
> so even in the unlikely event that some binary gets compromised, the
> damage could be minimal. 

I'd like to note that having an executable stack makes almost any
overflow trivially exploitable.

I think any system introducing this should make it an opt-out feature,
not opt-in.