uClibc Hardening Guide?

Anthony G. Basile basile at opensource.dyc.edu
Fri Mar 1 13:25:33 UTC 2013


I produce hardened uclibc gentoo stage3 tarballs for amd64, mips32r2 and 
x86.  Look at any gentoo mirror under:

    <mirror>/<arch>/uclibc

Eg.  http://mirrors.rit.edu/gentoo/experimental/amd64/uclibc/

Hardening is all the toolchain hardening we add to regular glibc gentoo. 
  See

      http://www.gentoo.org/proj/en/hardened/



On 02/28/2013 05:24 PM, Peter Mazinger wrote:
> Hi,
>
> not I am aware of. If you want the "hardened" version, you should enable SSP and PIE options. You have to recompile everything and use an ASLR enabled kernel (PAX or grsecurity patched)
>
> Regards, Peter
> -------- Original-Nachricht --------
>> Datum: Thu, 28 Feb 2013 13:52:55 -0500
>> Von: Jeffrey Walton <noloader at gmail.com>
>> An: uclibc at uclibc.org
>> Betreff: uClibc Hardening Guide?
>
>> Hi All,
>>
>> Does uClibc have a hardening guide? If so, would someone be able to
>> point me to it?
>>
>> I have not been able to locate one, but I might be missing some key
>> terms. For example,
>> https://www.google.com/#q=hardening+guide+site:uclibc.org
>>
>> Thanks in advance,
>> Jeff
>> _______________________________________________
>> uClibc mailing list
>> uClibc at uclibc.org
>> http://lists.busybox.net/mailman/listinfo/uclibc
> _______________________________________________
> uClibc mailing list
> uClibc at uclibc.org
> http://lists.busybox.net/mailman/listinfo/uclibc
>


-- 
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197


More information about the uClibc mailing list