On Thursday 20 October 2011 12:47:27 Rich Freeman wrote: > I was trying to draw a contrast between passive things like > stack-protection and things that really get in your face like MAC.
the trouble was in the context quoting then ... it sounded like you were proposing PaX by default i am a fan of things that "just work" though which is why i was happy to merge the fortify source code. most of that checking is done at compile time, so the runtime overhead is generally small. and in terms of packages that did break, it was (more often than not) because they were broken already but we never noticed. -mike
signature.asc
Description: This is a digitally signed message part.
