Re: anti-ptrace

From: Felipe Franciosi (ozzybugt_at_terra.com.br)
Date: 12/01/03

  • Next message: Terry Ott: "Re: tripwire" 
    Date: Mon, 01 Dec 2003 13:41:41 -0200
To: <focus-linux@securityfocus.com>

    > I installed the anti-ptrace in my server linux, i like to know if exists
    > some form of an invader to defraud the anti-ptrace.
    > Tks.
    >

    Denis,

    I always choose to use the latest kernel version (which usually is
    fully patched against known issues) and add to it the Solar Designer
    kernel patch (www.openwall.com).

    This patch adds some resources that helps on securing a linux box,
    such as:
    * Restricting access to /proc/;
    * Turning processes stack area into non-executable memory, in order
      to avoid most common exploits;
    * Destroying shared-memory areas with 0 attached process.

    You can find more information on this at www.openwall.com.

    Regards,
    Felipe 

    -- 
Felipe Franciosi <ozzybugt@terra.com.br>
  • Next message: Terry Ott: "Re: tripwire"