Uploaded image for project: 'Facter'
  1. Facter
  2. FACT-1730

Enable DEP support in Windows version of facter binaries

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: FACT 3.6.7, FACT 3.9.0
    • Component/s: Windows
    • Labels:
      None
    • Template:
    • Team:
      Security
    • Story Points:
      1
    • Release Notes:
      Security Fix
    • Release Notes Summary:
      Hide
      As part of security robustness measure, this change enables data execution prevention (aka /NX) and address space layout randomization in windows version of the facter binaries. There was no specific known vulnerability but it minimizes chances of anyone exploiting any unknown vulnerabilities while taking advantage of above things.
      Show
      As part of security robustness measure, this change enables data execution prevention (aka /NX) and address space layout randomization in windows version of the facter binaries. There was no specific known vulnerability but it minimizes chances of anyone exploiting any unknown vulnerabilities while taking advantage of above things.
    • QA Risk Assessment:
      Needs Assessment

      Description

      Enable NXCOMPAT and ASLR settings in windows binaries (exe/dlls) of facter.
      This is per a customer requirement to meet their security audit requirements. Presenting targeting v3.6.x (branch); might be propagated to other/later versions.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            jayant.sane Jayant Sane
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Zendesk Support