Fortunately you can at least get it to compile/run if you use -fno-stack-protector. But now that the current gcc versions include the stack smashing protector maybe we will see some changes upstream.

Utill this is fixed exim may be the MTA of choice.

Michael Labuschke wrote:

Yes i'd like to know how you patched postfix so "local" wouldn't segault
when compiled with a hardened GCC.

michael
-----Ursprüngliche Nachricht-----
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag von Sebastian
Faulborn
Gesendet: Mittwoch, 27. September 2006 18:19
An: [email protected]
Betreff: Re: Status of HLFS project

I have already developed a pretty stable HLFS (ie. I have not found a bug
yet...).

Have a look at http://www.secure-slinux.org.

Basically it is based on HLFS SVN-20060717 with kernel updated to
2.6.17.8 and grsecurity
updated to 2.1.9-2.6.17.8.

There are a few bugs fixed in the book. It would be a matter of a few hours
to list them here in the mailing list.

It has a lot of features added and lots of packages from BLFS run on it with
no problem at all, including XOrg, XFCE, Firefox, postfix, fcron, etc. Of
course for a base HLFS we don't need those packages.

A slightly older version (however with little change) has been running for
over half a year on a production server. No problems either.

If there is any interest, I could post those changes!

Sebastian Faulborn



Betreff:
Re: Status of HLFS project
Von:
Robert Connolly <[EMAIL PROTECTED]>
Datum:
Wed, 20 Sep 2006 21:25:24 -0400
An:
Hardened LFS Development List <[email protected]>


Great :-) I can't wait to see.

robert

On Tuesday 19 September 2006 17:37, Robert Baker wrote:


Well I have about the same schedule as you Robert, but I am willing to throw my hat in the ring to help maintain HLFS-Stable. I have a big interest in seeing that we can work out a hardened system capable of being used for stable server environments. I think that starting another branch for Stable is exactly what needs to happen. I am more than willing to sink a good 10-20 hrs a week into maintaining, and I have allready begun working on a branch of the SVN-20060717 build of HLFS. I am taking your suggestions at face value, and making the required adaptations to work from a more stable package set. I will have my edited HLFS-Book ready for review sometime this weekend time
permitting.
Hopefully we can get the ball rolling here, and I would love to help out with what time I have to do so.

Robert Baker


--
http://linuxfromscratch.org/mailman/listinfo/hlfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

---
[This E-mail scanned for viruses courtesy of Netslyder, 
Inc.(http://www.netslyder.net)]

--
http://linuxfromscratch.org/mailman/listinfo/hlfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

Reply via email to