RE: [SECURITY] [DSA 2443-1] linux-2.6 security update

2012-03-27 Thread Adrian Hernandez Perez
> Date: Mon, 26 Mar 2012 18:35:57 -0600 > From: da...@debian.org > To: debian-security-annou...@lists.debian.org > Subject: [SECURITY] [DSA 2443-1] linux-2.6 security update > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > - --

Re: Security Implications of DKMS?

2012-03-27 Thread Yves-Alexis Perez
On mar., 2012-03-27 at 14:18 +0300, Rares Aioanei wrote: > I see that as a myth. Look at it this way: if an attacker already has > access to your machine, he/she can install anything he/she wants, > including compilers, interpreters, whatever. A good way to prevent that is to enforce W^X. There

Re: Security Implications of DKMS?

2012-03-27 Thread Rares Aioanei
On 03/26/2012 06:29 PM, David Ehle wrote: Hello, A bit of googling doesn't seem to produce much in the way of results on this topic so I thought I would seek out opinions on the list. Please let me know if I'm making any false assumptions or showing a mis-understanding of the issue: DKMS

Re: Security Implications of DKMS?

2012-03-27 Thread Russell Coker
On Tue, 27 Mar 2012, David Ehle wrote: > Isn't having compilers/build tools considered a security "no no" if > possible to avoid? There have been some attacks on systems which have relied on the presence of various compilers and interpreters, the best known example is the Morris Worm. But the