URL: https://linuxfr.org/forums/linux-noyau/posts/r%C3%A9sultat-de-paxtest
Title: Résultat de paxtest
Authors: Henry-Nicolas Tourneur
Date: 2007年07月23日T19:43:10+02:00
Tags: debian et grsecurity
Score: 0
Bonjour,
Je suis en train de configurer grsecurity et pax sur un kernel 2.6.19.2. Je lance paxtest pour voire les progressions mais il y a 4 vulnérabilités que je n'arrive pas à écarter. Voici le résultat de ./paxtest blackhat :
 
 PaXtest - Copyright(c) 2003,2004 by Peter Busser <peter@adamantix.org>
 Released under the GNU Public Licence version 2 or later
 
 Mode: blackhat
 Linux Viki 2.6.19.2-grsec #7 Mon Jul 23 18:07:29 CEST 2007 i686 GNU/Linux
 
 Executable anonymous mapping : Killed
 Executable bss : Killed
 Executable data : Killed
 Executable heap : Killed
 Executable stack : Killed
 Executable anonymous mapping (mprotect) : Killed
 Executable bss (mprotect) : Killed
 Executable data (mprotect) : Killed
 Executable heap (mprotect) : Killed
 Executable shared library bss (mprotect) : Killed
 Executable shared library data (mprotect): Killed
 Executable stack (mprotect) : Killed
 Anonymous mapping randomisation test : 18 bits (guessed)
 Heap randomisation test (ET_EXEC) : 5 bits (guessed)
 Heap randomisation test (ET_DYN) : 15 bits (guessed)
 Main executable randomisation (ET_EXEC) : No randomisation
 Main executable randomisation (ET_DYN) : 15 bits (guessed)
 Shared library randomisation test : 15 bits (guessed)
 Stack randomisation test (SEGMEXEC) : 24 bits (guessed)
 Stack randomisation test (PAGEEXEC) : 24 bits (guessed)
 Return to function (strcpy) : Vulnerable
 Return to function (strcpy, RANDEXEC) : Vulnerable
 Return to function (memcpy) : Vulnerable
 Return to function (memcpy, RANDEXEC) : Vulnerable
 Executable shared library bss : Killed
 Executable shared library data : Killed
 Writable text segments : Killed
La machine tourne sous Debian etch. Voici un lien vers mon .config : [http://ns37076.ovh.net/trash/henry-nicolas/config-2.6.19.2-g(...)](http://ns37076.ovh.net/trash/henry-nicolas/config-2.6.19.2-grsec) 
Si quelqu'un sait ce que je dois faire pour améliorer ça, ce serait sympa de m'aider.
</div><div class="naked_ctrl">
<form action="/index.cgi/contrast" method="get" name="gate">
<p><a href="http://altstyle.alfasado.net">AltStyle</a> によって変換されたページ <a href="httpS://linuxfr.org/forums/linux-noyau/posts/r%C3%A9sultat-de-paxtest.md">(-&gt;オリジナル)</a>
/ <label>アドレス: <input type="text" name="naked_post_url" value="httpS://linuxfr.org/forums/linux-noyau/posts/r%C3%A9sultat-de-paxtest.md" size="22" /></label> <label>モード: <select name="naked_post_mode">
<option value="default">デフォルト</option>
<option value="speech">音声ブラウザ</option>
<option value="ruby">ルビ付き</option>
<option value="contrast" selected="selected">配色反転</option>
<option value="larger-text">文字拡大</option>
<option value="mobile">モバイル</option>
</select>
<input type="submit" value="表示" />
</p>
</form>
</div>