Openwall Linux Kernel Patch

Openwall Linux Kernel Patch: Posted Jul 20, 2009; Authored by Solar Designer | Site openwall.com; The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.; Changes: Besides being an update to the 2.4.37.3 kernel release, this revision of the patch introduces an additional security hardening measure where the kernel would no longer allow the "personality" feature (which is needed to support some program binaries from other operating systems) to be abused to bypass the vm.mmap_min_addr restriction via SUID-root programs with a certain class of design errors in them.; tags | overflow, kernel; systems | linux; MD5 | 2e9c348c8af5ff653b1efd3479e441c0; Download | Favorite | Comments (0)

Comments

No comments yet, be the first!