[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: prelink: is it worth it?



On Thu, Jul 9, 2009 at 5:59 PM, Till Maas <opensource till name> wrote:
On Thu July 9 2009, yersinia wrote:

> But something one have to pay a security prize on not disabling it :  it
> render impossible to have a
> centralizzated security integrity management (e.g. rfc.sf.net for example)
> or one have to skip from check the prelink binary. Very bad i think.

You pay a security prize if you disable prelink, because it also performs
address space randomization:
http://lwn.net/Articles/190139/

Strange enough this authorative refs, imho, not cited prelink as a security feature
for aslr :=)
http://www.awe.com/mark/blog/200801070918.html

Btw, the reality is more complex this days

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]