Re: Unexecutable Stack / Buffer Overflow Exploits...

[Matija Nalis]

On 30 Dec 1999 21:37:37 +0100, Jakma, Paul <[e-mail]> wrote:
>IMO non-exe stack should be a compile option, so that those who need/like
>paranoid setups can have that small extra bit of security. Granted, most
>people don't need it, and most people shouldn't use it. And support for
>various trampoline formats should be kept to a minimum. But it should be an
>option.

It *IS* an option. You need to apply an patch to enable that option. Since
you are skilled sysadmin, you know how to do that. Most newbie-users for
which this would cause an problem don't know how to download and apply that
patch, so no problem for them.

As to why it is not in the Linus kernel - it is not because Linus said no. 
If you think you know better, you fork your kernel, call it secure-linux or
something and maintain it. As simple as that.

-- 
Opinions above are GNU-copylefted.