IP stack = 0 ??

[Tony Leahy]

Hi,
I have been asked on our HPUX servers to ensure IP stack = 0. Now I must admit I haven't a clue how to go about do that

anybody have any ideas what it does and how I go about ensuring IP stack = 0 ?

points will be awarded quickly :)

Tony

[James R. Ferguson]

Hi Tony:

Do you mean the kernel tunable 'executable_stack'? Setting this to zero (0) provides the most protection against "stack-smaching" or buffer-overflow attacks.

See here:

http://www.docs.hp.com/en/B2355-60103/executable_stack.5.html

...and yes, this applies to 11.11 or 11.23...

Regards!

...JRF...

[Chan 007]

Tony,

check this link,

http://www.cymru.com/Documents/ip-stack-tuning.html

Chan

[Chan 007]

Sorry I was very fast

http://www.cromwell-intl.com/SECURITY/security-stack-hardening.html

Chan

[Tony Leahy]

thanks,
those links are a help

Tony