From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JSAft-0001XM-3A for garchives@archives.gentoo.org; Thu, 21 Feb 2008 12:37:17 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 0EBB2E0343; Thu, 21 Feb 2008 12:35:54 +0000 (UTC) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.182]) by pigeon.gentoo.org (Postfix) with ESMTP id 43512E0324 for ; Thu, 21 Feb 2008 12:35:53 +0000 (UTC) Received: by wa-out-1112.google.com with SMTP id k34so17381wah.10 for ; Thu, 21 Feb 2008 04:35:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=oP2vjgjksozDv62KghGZB4Rzl50yx6mkgMvEpqoostM=; b=u/bStSTflxBb48Ovd/ThxJu3zbpUtk98XrNDNsfaCZgcMr75izFww1VhguoCOPSzD41aX4t0QFSxHuFpZqp2/B4wQTPnp/hDALLiQvRzVC9Lb0yDqtKW0KnKgzMYMA0AJ4rvH2NplWozU70Sb8m3a18gGR/8l6Nnhz/FSeK6ta8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=U5mIuVQBCHlwI9N7VBnBsC6NEuDUTamJH2fT17tfS7jAePStzegahdXQveMF1RRNXngQmhZWePlc0X9+Z21ZK3wq6VvKVQzN9d0cXhxOc1veXVZ5VNEj7g10jPs+kbat+2uvQ8RGzixRn700z8w+qn+B6JsWyVjPV02THPm7h5s= Received: by 10.114.191.1 with SMTP id o1mr770861waf.66.1203597352825; Thu, 21 Feb 2008 04:35:52 -0800 (PST) Received: by 10.115.111.19 with HTTP; Thu, 21 Feb 2008 04:35:52 -0800 (PST) Message-ID: Date: Thu, 21 Feb 2008 20:35:52 +0800 From: "Eduardo Tongson" To: gentoo-security@lists.gentoo.org Subject: Re: [gentoo-security] Kernel Security + KISS In-Reply-To: <1203587649.8608.34.camel@flyttis> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-security@lists.gentoo.org Reply-to: gentoo-security@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Content-Disposition: inline References: <200802180512.35888.rbu@gentoo.org> <200802201359.55663.sysadmin@tacticalbusinesspartners.com> <1203548143.26804.29.camel@media> <1203587649.8608.34.camel@flyttis> X-Archives-Salt: b3712dac-d536-4585-8e3e-56f6abe62530 X-Archives-Hash: 8a679e05416eab89ffe342cf1448f892 SWYgbm8gR2VudG9vIGRldmVsb3BlciBjb21lcyBmb3J3YXJkLCBJIHZvbHVudGVlciBteXNlbGYu IFNlZW1zCmV2ZXJ5Ym9keSBpcyBidXN5IGFuZCBvdmVyd29ya2VkIHRvIGV2ZW4gYXV0aG9yaXpl IGFuIG9mZmljaWFsIHRlYW0uCkFueSBHZW50b28gZGV2ZWxvcGVyIHdobyBjYW4gc2hhcmUgdGhl aXIgJ2EgZGF5IGluIHRoZSBsaWZlIG9mIHRoZQpHZW50b28gS2VybmVsIFNlY3VyaXR5IHRlYW0n IGV4cGVyaWVuY2U/CgogIC0tICBlZCplb25zZWMKCk9uIFRodSwgRmViIDIxLCAyMDA4IGF0IDU6 NTQgUE0sIFBldGVyIEhqYWxtYXJzc29uIDx4YWtlQHJ5bWRyYWtldC5uZXQ+IHdyb3RlOgo+IEFG QUlDUyB0aGUgdGhpbmcgbWlzc2luZyBpcyBhIGxlYWRlci4gU29tZW9uZSB0byBtYWtlIGEgc3Rh cnRpbmcgcG9pbnQKPiAgZm9yIHRoZSBmb2xsb3dlcnMgdG8gbWFrZSB1c2Ugb2YgKG5vdCBuZWNl c3NhcnkgaW5zaWRlIG9mIGdlbnRvbywgSQo+ICBiZWxpZXZlIGl0IGNhbiBhbHdheXMgYmUgaW50 ZWdyYXRlZCBsYXRlciBpZiB0aGVyZSBhcmUgZGV2cyBlbm91Z2ggdG8KPiAgcGljayB0aGluZ3Mg dXAgYW5kIGludGVncmF0ZSksIGEgcGxhY2UgZm9yIGhpbSB0byBjb2xsZWN0IGFuZCBrZWVwIGxp c3QKPiAgYW5kIGNvbnRhY3Qgd2l0aCBpbnRlcmVzdGVkIHBlb3BsZSAoYWxzbyB0byBrZWVwICJt ZSB0b28iLW5vaXNlIGZyb20KPiAgdGhpcyBsaXN0KS4KPgo+ICBUaGlzIGRvZXMgbm90IGV2ZW4g aGF2ZSB0byBiZSBhIGludGVncmF0ZWQgZ2VudG9vIHNvbHV0aW9uLCBhbSBJIHJpZ2h0Pwo+ICBB bnlib2R5IGhhdmluZyBhIGhvc3Rpbmcgc3BhY2UgY291bGQgaG9zdCBhIGRiIHdpdGggdGhlCj4g IGluZm9ybWF0aW9uL2Fkdmlzb3JpZXMuCj4gIEFuZCB0aGUgaG9zdGluZyBvbmUgY291bGQgbGV0 IGFueW9uZSBoZS9zaGUgdHJ1c3RzIHdyaXRlIGluZm8gdG8gdGhhdAo+ICBkYi4KPiAgVGhhdCBk YiBjb3VsZCBiZSBsaWtlICJUaGlzIHZvdXJuYWJsZSBleGlzdHMsIHRoZXNlIGFyZSB0aGUgcHJv YmxlbXMsCj4gIHRoZXNlIGFyZSB0aGUgd29ya2Fyb3VuZHMvcGF0Y2hlcyBhbmQgdGhlcmUgYXJl IG5vIGZpeGVkIGtlcm5lbAo+ICB2ZXJzaW9ucy90aGVzZSBrZXJuZWwgdmVyc2lvbnMgYXJlIGZp eGVkIiB3aGVyZSBpbmZvIGNvdWxkIGJlIHVwZGF0ZWQgYXMKPiAgdGhleSBnZXQgYWxvbmcuCj4g IEFuZCBhbnlib2R5IO+7v3RoYXQgaGFzIHRoZSB0aW1lIGFuZCBza2lsbCBjb3VsZCB3cml0ZSBh IGFwcGxpY2F0aW9ucyB0aGF0Cj4gIGZldGNoIGluZm8gZnJvbSB0aGlzIGRiIGFib3V0IHRoZSBj dXJyZW50bHkgcnVubmluZyBrZXJuZWwgYW5kIHByZXNlbnRzCj4gIHRoZSB1c2VyIHdpdGggdGhl IHRleHQgIk5vIGtub3duIHZvdXJuYWJsZXMiIG9yICJUaGVzZSB2b3VybmFibGVzCj4gIGV4aXN0 cyIgd2l0aCBsaW5rcyB0byB0aGUgaW5mb3JtYXRpb24gaW4gdGhlIGRiIGFib3V0IHRoYXQgYWR2 aXNvcnkuCj4gIFRoaXMgd2F5IGEgdXNlciBjYW4gcnVuIHRoZSBhcHBsaWNhdGlvbiwgZ2V0IGEg bWVzc2FnZSwgcmVhZCB0aGUKPiAgYWR2aXNvcmllcyBhbmQgZGVjaWRlICJJIG5lZWQgdG8gdXBk YXRlIHRvIGF0IGxlYXN0IHRoaXMgdmVyc2lvbiIgb3IgIkkKPiAgZG8gbm90IG5lZWQgdG8gdXBk YXRlIi4KPgo+ICBUaGUgdGhpbmcgbmVlZGVkIGFmdGVyIHRoYXQgaXMgcGVyc29ucyB0byBrZWVw IHRoaXMgZGIgdXAgdG8gZGF0ZSBhbmQKPiAgbWF5YmUgYnVnIGRldnMgdG8gZ2V0IGZpeGVkIHZl cnNpb25zIGludG8gcG9ydGFnZS4KPiAgQnV0IHRoZXNlIHBlb3BsZSBuZWVkcyBhIGNlbnRyYWwg Y29sbGVjdGlvbiBwb2ludCB3aGVyZSB0aGV5IGNvdWxkCj4gICJtZWV0IiBhbmQgc3RhcnQgbW92 aW5nIHRoaW5ncy4KPgo+ICBBbmQgYW55Ym9keSBjYW4gYnVnIGFueSBkZXYgaW4gYnVnemlsbGEg aWYgYSBrZXJuZWwgaXMgbm90IGZpeGVkLCBidXQKPiAgdGhlIGNoYW5jZXMgb3Zlci13b3JrZWQg ZGV2cyB3aWxsIG5vdGljZSBhbmQgYmUgbW9yZSBoZWxwZnVsIGlmIHlvdSBhcmUKPiAgbW9yZSBo ZWxwZnVsIHdpdGggd2hhdCwgd2hlbiBhbmQgd2h5IHRoaXMga2VybmVsIHRoaW5nIHNob3VsZCBi ZSBmaXhlZAo+ICAoaS5lLiBjb21lIHdlbGwgcHJlcGFyZWQpLgo+Cj4KPiAgdG9yIDIwMDgtMDIt MjEga2xvY2thbiAxMToxNiArMDgwMCBza3JldiBFZHVhcmRvIFRvbmdzb246Cj4KPgo+ID4gQWxy aWdodCBob3cgZG8gd2UgcHJvY2VlZCB0byBnZXQgdGhpcyB0ZWFtIHN0YXJ0ZWQuCj4gID4KPiAg PiAgIGVkKmVvbnNlYwo+ICA+Cj4gID4gT24gVGh1LCBGZWIgMjEsIDIwMDggYXQgNjo1NSBBTSwg TmVkIEx1ZGQgPHNvbGFyQGdlbnRvby5vcmc+IHdyb3RlOgo+ICA+ID4KPiAgPiA+Cj4gID4gPiAg T24gV2VkLCAyMDA4LTAyLTIwIGF0IDEzOjU5IC0wNTAwLCBIYXJsYW4gTGllYmVybWFuLUJlcmcg d3JvdGU6Cj4gID4gPiAgPiBPbiBTdW5kYXkgMTcgRmVicnVhcnkgMjAwOCAyMzoxMjozNSBSb2Jl cnQgQnVjaGhvbHogd3JvdGU6Cj4gID4gPiAgPiA+IE9uIFN1bmRheSwgMTcuIEZlYnJ1YXJ5IDIw MDgsIEVkdWFyZG8gVG9uZ3NvbiB3cm90ZToKPiAgPiA+ICA+ID4gPiBXaGF0IHNwZWNpZmljIGtl cm5lbCBrbm93bGVkZ2UgaXMgbmVlZGVkIHRvIGdldCBhIEtlcm5lbCBhZHZpc29yeSB1cAo+ICA+ ID4gID4gPiA+IGFuZCBydW5uaW5nID8KPiAgPiA+ICA+ID4KPiAgPiA+ICA+ID4gQmV0d2VlbiBi ZWNvbWluZyBhd2FyZSBvZiBhIHZ1bG5lcmFiaWxpdHkgaW4gTGludXggYW5kIGRyYWZ0aW5nIGFu IGFkdmlzb3J5Cj4gID4gPiAgPiA+IGZvciBvbmUgb3IgYWxsIGtlcm5lbCBzb3VyY2VzIGNvbWVz IHRoZSBwYXJ0IHdoZXJlIHlvdSByZXZpZXcgd2hpY2gKPiAgPiA+ICA+ID4gdmVyc2lvbnMgb2Yg d2hpY2gga2VybmVsIHNvdXJjZXMgYXJlIGFmZmVjdGVkIGFuZCB1bmFmZmVjdGVkLiBZb3UgYWxz bwo+ICA+ID4gID4gPiBuZWVkIHRvIHBheSBhdHRlbnRpb24gdG8gc3BlY2lmaWNzIG9mIHRoZSBh ZGRlZCBwYXRjaHNldHMsIHdoaWNoIG1pZ2h0Cj4gID4gPiAgPiA+IGR1cGxpY2F0ZSB2dWxuZXJh YmlsaXRpZXMuCj4gID4gPiAgPiA+Cj4gID4gPiAgPiA+IFBhcnRzIG9mIHRoZSBqb2IgY2FuIGlu ZGVlZCBiZSBkb25lIHdpdGhvdXQgS2VybmVsIGFuZCBDIGtub3dsZWRnZSwgYnV0Cj4gID4gPiAg PiA+IHNvbWUgY2Fubm90LiBTbyBpZiB3ZSBkcmFmdCBhIG5ldyBrZXJuZWwgc2VjdXJpdHkgKnRl YW0qLCBwZW9wbGUgd2l0aG91dCBDCj4gID4gPiAgPiA+IGFuZCBrZXJuZWwga25vd2xlZGdlIGFy ZSBoZWxwZnVsIC0tIHNvbWUgb3RoZXJzIG5lZWQgdG8gaGF2ZSBpdCwgdGhvdWdoLgo+ICA+ID4g ID4gPgo+ICA+ID4gID4gPiBSb2JlcnQKPiAgPiA+ICA+Cj4gID4gPiAgPiBUbyBiZSBob25lc3Qs IDk5JSBvZiB3aGF0IGlzIGRvbmUgaW4gdGhlIGtlcm5lbCBzZWN1cml0eSB0ZWFtIGNhbiBiZSBk b25lIHdpdGgKPiAgPiA+ICA+IG5vIEMga25vd2xlZGdlIGF0IGFsbC4KPiAgPiA+ICA+Cj4gID4g PiAgPiBJJ20gbm90IGFuIGV4cGVydCBDIHBlcnNvbiAtIGZhciBmcm9tIGl0IC0gYnV0IEkgZXZl bnR1YWxseSBiZWNhbWUgdGhlIGhlYWQgb2YKPiAgPiA+ICA+IEtlcm5lbCBTZWN1cml0eSB1bnRp bCBJIHJldGlyZWQgYSBmZXcgbW9udGhzIGFnby4KPiAgPiA+ICA+Cj4gID4gPiAgPiBNb3N0IG9m IGl0IGlzIGJ1ZyBoYW5kbGluZy4gIFRoZSBtYWpvciBwcm9ibGVtIGlzIGEgc29jaWFsLCBub3Qg YSB0ZWNobmljYWwKPiAgPiA+ICA+IG9uZS4gIEJlY2F1c2Ugb2YgdGhlIG1hbm5lciBpbiB3aGlj aCBvdXIga2VybmVscyBhcmUgb3JnYW5pemVkLCBhIHNpbmdsZQo+ICA+ID4gID4gdnVsbmVyYWJp bGl0eSBpbnZvbHZlcyBjaGVja2luZyB1cHN0cmVhbSB2ZXJzaW9uIG51bWJlcnMsIGNvb3JkaW5h dGluZyB0aGVtCj4gID4gPiAgPiBpbnRvIG91ciBkb3duc3RyZWFtIHZlcnNpb24gbnVtYmVycyBm b3IgYWxsIHNvdXJjZXMsIGNoZWNraW5nIHRvIHNlZSBpZiB0aGUKPiAgPiA+ICA+IHNvdXJjZXMg YXJlIGVmZmVjdGVkLCBmaWd1cmluZyBvdXQgd2hvIHRvIENDIGZvciB0aGUgYnVncywgdGhlbiBo YXJhc3NpbmcKPiAgPiA+ICA+IHRoZW0gdW50aWwgdGhleSBkbyBpdC4KPiAgPiA+ICA+Cj4gID4g PiAgPiBVbmxpa2Ugb3RoZXIgc2VjdXJpdHkgc291cmNlcywgYW55IGF0dGVtcHQgdG8gaGFyZG1h c2sgdGhlIHBhY2thZ2UgaXMgc2h1dGRvd24KPiAgPiA+ICA+IGluc3RhbnRseS4gIFRoZSBjaGFv cyB0aGF0IHdvdWxkIHJlc3VsdCBmcm9tIGEga2VybmVsIGhhcmRtYXNrLCBldmVuIG9uZSBvZgo+ ICA+ID4gID4gdGhlIGxlc3NlciB1c2VkIG9uZXMsIGNhdXNlZCBtZSB0byBvbmx5IHN1Y2Nlc3Nm dWxseSBvcmRlciBvbmUgb3ZlciBteSBlbnRpcmUKPiAgPiA+ICA+IGNhcmVlciBpbiBHZW50b28g S2VybnNlYy4uLiBldmVuIHRob3VnaCBtb3JlIGFyb3VuZCAzMCB3b3VsZCBoYXZlIGJlZW4KPiAg PiA+ICA+IG5lZWRlZC4gIEl0IGlzIG5vdCBpbmZyZXF1ZW50bHkgdGhhdCBidWdzIHdpbGwgbGFz dCBzaXggbW9udGhzIHdpdGhvdXQgYW55Cj4gID4gPiAgPiBhY3Rpb24gY29taW5nIGFib3V0IHRo ZW0sIGFuZCB1c2VycyBhcmUgYmxpc3NmdWxseSB1bmF3YXJlLgo+ICA+ID4gID4KPiAgPiA+ICA+ IEkgYW0gaGFwcHkgdG8gZ2l2ZSBteSBpbnB1dCBhcyB0aGUgZm9ybWVyIGhlYWQgb2YgS2VybmVs IFNlY3VyaXR5LCBidXQgaXQgaXMKPiAgPiA+ICA+IG15IHBlcnNvbmFsIG9waW5pb24gdGhhdCBh bnkgYWR2YW5jZXMgaW4ga2VybmVsIHNlY3VyaXR5IHdpbGwgcmVxdWlyZSB0aGUKPiAgPiA+ICA+ IGZ1bGwgY29vcGVyYXRpb24gb2Ygc2VjdXJpdHksIGFuZCBsZXR0aW5nIHRoZSBoZWFkIG9mIGtl cm5lbCBzZWN1cml0eSBiZSBhYmxlCj4gID4gPiAgPiB0byBhY3R1YWxseSBlbmZvcmNlIHRocmVh dHMsIGFzIHRoYXQgc2VlbXMgdG8gYmUgdGhlIG9ubHkgd2F5IGJ1Z3MgZXZlciBnZXQKPiAgPiA+ ICA+IHJlc29sdmVkLiAgUGxlYWRpbmcgZGlkbid0IHdvcmsgLSBJIHRyaWVkLgo+ICA+ID4gID4K PiAgPiA+ICA+IC1IYXJsYW4gTGllYmVybWFuLUJlcmcKPiAgPiA+ICA+IEdlbnRvbyBEZXZlbG9w ZXIgRW1lcml0dXMKPiAgPiA+Cj4gID4gPgo+ICA+ID4gIEV2ZXJ5IHdvcmQgb2Ygd2hhdCB5b3Ug c2FpZCBpcyBwYWluZnVsbHkgdHJ1ZS4gVGhlIG9ubHkgd2F5IHRvCj4gID4gPiAgYWNjb21wbGlz aCB0aGlzIHdvdWxkIGJlIHdpdGggYW4gSXJvbiBGaXN0KGZhaWwpIG9yIGEgdGVhbSBvZiB+MTUg Z3V5cwo+ICA+ID4gIHdobyBkbyBub3RoaW5nIGJ1dCBwYXRjaCBhbmQgcHVzaCBuZXcga2VybmVs cyBhbmQgdGhlIFBSIHRoYXQgZ29lcyBhbG9uZwo+ICA+ID4gIHdpdGggdGhlbSBldmVyeSBmZXcg ZGF5cy4KPiAgPiA+ICAtLQo+ICA+ID4gIE5lZCBMdWRkIDxzb2xhckBnZW50b28ub3JnPgo+ICA+ ID4KPiAgPiA+Cj4gID4gPgo+ICA+ID4gIC0tCj4gID4gPiAgZ2VudG9vLXNlY3VyaXR5QGxpc3Rz LmdlbnRvby5vcmcgbWFpbGluZyBsaXN0Cj4gID4gPgo+ICA+ID4KPgo= -- gentoo-security@lists.gentoo.org mailing list