Libsafe

EAD · 03-25-2006, 09:17 AM

Hii, I have seen that package calld "Libsafe" wich should help me avoid "buffer overflow security problem", so I have done
"Pacman -S libsafe" adn install it.
How can I use it now? what make it work when using the risky c libs?

jomen · 03-25-2006, 09:58 AM

The documentation on this is in the manual-page which should have been installed along with libsafe.
basically - put this into /etc/profile:
export LD_PRELOAD="/lib/libsafe.so.1 $LD_PRELOAD"
or add the library path to /etc/ld.so.preload instead

There is more to take care of (in case of upgrades for instance) - read the documentation!

Maybe this has already been taken care of when you installed the package...?

int0x80 · 03-25-2006, 02:47 PM

You can download paxtext [pax.grsecurity.net] and run that to see if you are still vulnerable to certain types of attacks.

EAD · 03-26-2006, 06:03 AM

Quote:

Originally Posted by int0x80

You can download paxtext [pax.grsecurity.net] and run that to see if you are still vulnerable to certain types of attacks.

I seem to have many vulnerables, How can I fix it?

int0x80 · 03-26-2006, 09:13 AM

Use grsecurity [grsecurity.net].