Pong said:
>
>
> unfortunately, the stock linux kernel has still no built-in measures to
> power down the all-powerful root in a usable state or protect the
> memory pages (stack, heap, data) against buffer overflows, to do
> mandatory access controls at the file, network and process levels, and
> to limit direct memory/disk access. that's why it helps alot in the
> real world to go the extra mile in installing kernel-intrusive security
> patches.

well I guess you can use software like LIDS to limit the root user so it's
not "all-powerful"

/dre


_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL 
PROTECTED]

Reply via email to