topic Re: IP stack = 0 ?? in Operating System - HP-UX

IP stack = 0 ??

Tony Leahy — Tue, 18 Apr 2006 09:41:16 GMT

Hi,
I have been asked on our HPUX servers to ensure IP stack = 0. Now I must admit I haven't a clue how to go about do that

anybody have any ideas what it does and how I go about ensuring IP stack = 0 ?

points will be awarded quickly :)

Tony

Re: IP stack = 0 ??

James R. Ferguson — Tue, 18 Apr 2006 09:49:44 GMT

Hi Tony:

Do you mean the kernel tunable 'executable_stack'? Setting this to zero (0) provides the most protection against "stack-smaching" or buffer-overflow attacks.

See here:

http://www.docs.hp.com/en/B2355-60103/executable_stack.5.html

...and yes, this applies to 11.11 or 11.23...

Regards!

...JRF...

Re: IP stack = 0 ??

Chan 007 — Tue, 18 Apr 2006 09:49:58 GMT

Tony,

check this link,

http://www.cymru.com/Documents/ip-stack-tuning.html

Chan

Re: IP stack = 0 ??

Chan 007 — Tue, 18 Apr 2006 09:51:24 GMT

Sorry I was very fast

http://www.cromwell-intl.com/SECURITY/security-stack-hardening.html

Chan

Re: IP stack = 0 ??

Tony Leahy — Thu, 20 Apr 2006 04:51:51 GMT

thanks,
those links are a help

Tony