OpenForum RSS: � Glibc ��

� Glibc �� (paxuser)

Sun, 24 Oct 2010 18:19:49 GMT

> PaX has an unknown number of people involved! Hence PaX Team --
> it's definitely at least one person :) For the grsecurity side

�� . �� pipacs:

"I talked to a few friends about it and we decided to
do a windows version as that's what we were familiar with (speaking
of kernel internals). This is also the reason for the 'team' in the
name, even if the other guys dropped out soon afterwards to pursue
other interests."

http://www.phrack.org/issues.html?issue=66&id=2

� Glibc �� (taaroa)

Sun, 24 Oct 2010 09:14:58 GMT

>PaX - �� , �� - ��. Grsecurity - �� , �� - ��. �� .

�� .

Slo-Tech: Could you please describe in few words what is PaX and GRSecurity and how many people are involved in those projects.

Brad Spengler: PaX is a beast that has changed the shape of security drastically already and has even more tricks up its sleeve to change it even further sometime in the near future. It focuses itself with the generic eradication of exploitation against a number of bug classes. Some of that work is still incomplete, but that will (hopefully) change and then another 8 years from now everyone else will catch on. PaX focuses entirely on the exploitation of memory, whereas grsecurity adds in other host-based defenses and adds extra su

� Glibc �� (paxuser)

Sat, 23 Oct 2010 04:06:23 GMT

> ln /bin/ping /tmp/exploit/target
> ln: �� `/tmp/exploit/target' => `/bin/ping': ��

�� .

� Glibc �� (��)

Sat, 23 Oct 2010 02:07:38 GMT

ln /bin/ping /tmp/exploit/target
ln: �� `/tmp/exploit/target' => `/bin/ping': ��

OpenSUSE 11.3 // Kernel 2.6.35.4 + Ubuntu patches + BFQ + BFS
�� yama �� apparmor ��....

� Glibc �� (solardiz)

Fri, 22 Oct 2010 22:33:10 GMT

��, �� : http://lists.openwall.net/full-disclosure/2010/10/22/15

�� Debian: http://lists.openwall.net/full-disclosure/2010/10/22/16

� Glibc �� (paxuser)

Thu, 21 Oct 2010 20:18:59 GMT

�� #grsecurity:

<taviso> kees: we pwned you :)
<taviso> (check your mail)
<kees> taviso: aaah craps
<kees> taviso: nice work :)
<taviso> thanks :D
<spender> AHH CRAPS
<kees> taviso: well, no worries, the glibc update was waiting in the wings anyway. I'll get it published. :)
<spender> I INFERR THAT UBUNTU IS VULN TO THE GLIBC BUG
<spender> and i guess all other eglibc users too? :p

� Glibc �� (��)

Thu, 21 Oct 2010 16:26:05 GMT

I just can't create the link from /bin/ping to /tmp/exploit/target
ln: creating hard link `exploit/target' => `/bin/ping': Invalid cross-device link

� Glibc �� (��)

Thu, 21 Oct 2010 14:41:10 GMT

�� glibc, �� $ LD_AUDIT="\$ORIGIN" exec /proc/self/fd/3 �� .

� Glibc �� (paxuser)

Thu, 21 Oct 2010 13:58:11 GMT

> �� ? �� PaX �� ?

�� , �� , �� grsecuser �� grsecurityuser, � �� , �� , �� , � ޣ� ��.

OpenForum RSS: � Glibc ���������� ��������� ����������

� Glibc ���������� ��������� ���������� (paxuser)

� Glibc ���������� ��������� ���������� (taaroa)

� Glibc ���������� ��������� ���������� (paxuser)

� Glibc ���������� ��������� ���������� (������)

� Glibc ���������� ��������� ���������� (solardiz)

� Glibc ���������� ��������� ���������� (paxuser)

� Glibc ���������� ��������� ���������� (������)

� Glibc ���������� ��������� ���������� (����)

� Glibc ���������� ��������� ���������� (paxuser)

OpenForum RSS: � Glibc ��

� Glibc �� (paxuser)

� Glibc �� (taaroa)

� Glibc �� (paxuser)

� Glibc �� (��)

� Glibc �� (solardiz)

� Glibc �� (paxuser)

� Glibc �� (��)

� Glibc �� (��)

� Glibc �� (paxuser)