Re: [CFT] ASLR, PIE, and segvguard on 11-current and 10-stable

From: Julian Elischer <julian_at_freebsd.org>
Date: Mon, 26 May 2014 09:54:24 +0800
On 5/26/14, 5:18 AM, David Chisnall wrote:
> On 25 May 2014, at 21:31, Oliver Pinter <oliver.pntr_at_gmail.com> wrote:
>
>> On 5/25/14, Dag-Erling Smørgrav <des_at_des.no> wrote:
>>> Oliver Pinter <oliver.pntr_at_gmail.com> writes:
>>>> pax_log will be in future a generic pax related logging framework,
>>>> with ratelimiting and other features.  It will log user, IP, binary
>>>> name, path, checksum, and others.
>>> What are you using this for?  Are you sure you can't use ktrace?  It's a
>>> lot more flexible and powerful than you probably realize.
>> Logging to system log, The feature will similar to this in grsecurity:
>> http://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_PaX_Configuration_Options#Kernel_Auditing
> It sounds like you actually want to be writing audit events then.  See audit(4).

yeah I think the point is not "use ktrace" but "use and/or possibly 
extend one of the several already existing methods".
we don't need *another* logging facility.

>
> David
>
> _______________________________________________
> freebsd-security_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe_at_freebsd.org"
>
>
Received on Sun May 25 2014 - 23:54:44 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:49 UTC