[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: Turning on stack protection by default
On Sun, Oct 25, 2009 at 05:25:16PM +0000, Mindaugas Rasiukevicius wrote:
> > And the worst case seems to be 8%. Such numbers are however not good
> > enough for "certain people".
> Perhaps enabling it on services/daemons (e.g. postfix, bind) ...
You don't get the full protection unless the kernel and the libraries
use SSP as well.
> ... would make you feel better?
I don't mind 8% *worst case* performance degradation for a more secure
and stable system.
Matthias Scheler http://zhadum.org.uk/
Main Index |
Thread Index |