Non-executable stack

[db]

On Thursday 27 October 2005 06:35, you wrote:
> I don't think it will ever be in FreeBSD, but I used ProPolice in the past:

I really hope it will. AFAIK OpenBSD implemented this in late 2002 when 3.2 
was released. I can see why FreeBSD doesn't want software protection of the 
stack on systems like ia32, but on ia64 we have hardware support, so why not 
be able to build a kernel with stack (and heap?) protection?

> http://www.research.ibm.com/trl/projects/security/ssp/buildfreebsd.html
>
> The patch should be for 5.x in general, I don't use it anymore since some
> ports will break, if you play with it you can disable it by default and
> enable it explicit when you are willing to compile a binary with it.

Ok thanks, but I was looking for a kernel level patch. Btw which ports will 
break?

br
db