Language Selection

English French German Italian Portuguese Spanish

Securing Slackware

Filed under
Linux
Using the exec-shield Kernel Patch on Slackware 10.1

by Kurt Fitzner

The Holy Grail of most any hacker trying to get access to a system is the remote buffer overflow attack. Well, actually, it's finding a Windows PC not protected by a firewall, but the remote buffer overflow attack is a (somewhat) close second. This article will discus one way to help protect against this type of attack on a Slackware Linux system with the installation of a special system called exec-shield.

This installation will occur in two phases. The first phase is installing the exec-shield kernel patch, the second is replacing some of Slackware's packages with ones that are compiled to work together with exec-shield.

What is a Buffer Overflow Attack?

Before we explain how to protect against a buffer overflow attack, it is useful to examine what exactly this attack is and what the ramifications are for an unprotected system.

The best way to secure against a buffer overflow attack is to run software that isn't vulnerable to such attacks.

In order for a malicious attacker to get your system to do what the attacker wants it to do by using a buffer overflow to rewrite a return address, the attacker has to know the exact address in memory on your system of a useful function.

Full Article.

More in Tux Machines

Open-Source Radeon 2D Performance Is Better With Ubuntu 14.10

While we're most often looking at the OpenGL 3D performance of the Linux graphics drivers, in the tests currently being done of Ubuntu 14.04 LTS vs. Ubuntu 14.10 are also a number of 2D graphics benchmarks. In the article today are our 2D benchmarks between Ubuntu 14.04.1 and Ubuntu 14.10 for various AMD Radeon graphics cards and it shows off significant performance improvements. Read more

Today in Techrights

Today's articles: Links outline:

KDE With Theoretical Client-Side Decorations, Windows 10 Influence

KDE contributor and graphics designer Ken Vermette has penned an interesting series of KDE "What if..." articles where he talks about (and has some visual mock-ups) about what KDE might look like with client-side decorations along and separately if KDE were to use Windows 10 design components. Read more Also: What if… Plasma Used Launchers from Other Systems & Enviornments? (Part 1) What if… KDE Used Windows 10 Design Components?

Pondering FOSS foundations

In the case of the Document Foundation, the LibreOffice project needed an independent, solid and meritocratic entity dedicated to support it. In other terms, the OpenOffice.org community wanted to be its own boss and stop relying on corporate – or even third party – good will. If you attend the Community Track on the 31st you will be able to learn more about the Document Foundation and the other entities, but my message here is that while there is no silver bullet in these matters, forcing a community be hosted or to bend to a software vendor never works. It bends if it wants to; it goes whereever it wishes to go. In the case of the Document Foundation, independence and community rule prevailed over convenience; today the results do not need to be proven anymore. But it does not mean we hold the truth more than anybody else: we just ensured the community was in charge. Read more