Re: propolice

[Miod Vallat <miod@online.fr>]

> Propolice relies on a random guard variable that is unknown to an attacker,
> and which cannot be determined without local root privileges.
> 
> However, an attacker could load a compiled package on a machine on which he
> does have root and determine the value.
> 
> So any protection would not apply to pre-compiled packages.
> 
> I may be wrong here, if so would someone please let me know how.

The guard value is computed at runtime, and will be different between
processes.

So having the ability to know it in your binary does not help much
breaking others.