Re: propolice

[Peter Varga <peter.varga@screaminet.com>]

On Mon, Dec 02, 2002 at 02:47:38AM -0700, Theo de Raadt wrote:
> > (I guess my antipathy to "bolt-on" security is well known. Didn't we have an
> > argument about this about a year ago? At the time you rejected putting
> > buffer-overflow protection into a compiler because "it would break too
> > much". Fine, but why add an insecure/ineffective feature if you've changed
> > your mind?)
> 
> Nothing at the time was sufficient to the task.
> 
> Go read the damn propolice paper, and see what existed at the time.
> 
> I'll give you a hint:
> 
> 	All the world is an i386.

Another hint:  does the hardware know what is executable and what is
data?  Is there any way to tell the hardware this page/segment/bank is
executable? 

Thanks for all the work to have propolice.
Asap i'll try it.