Uploaded image for project: 'Facter'
  1. Facter
  2. FACT-1730

Enable DEP support in Windows version of facter binaries

    Details

    • Type: Task
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: FACT 3.6.7, FACT 3.9.0
    • Component/s: Windows
    • Labels:
      None
    • Template:
    • Team:
      Security
    • Story Points:
      1
    • Release Notes:
      Security Fix
    • Release Notes Summary:
      Hide
      As part of security robustness measure, this change enables data execution prevention (aka /NX) and address space layout randomization in windows version of the facter binaries. There was no specific known vulnerability but it minimizes chances of anyone exploiting any unknown vulnerabilities while taking advantage of above things.
      Show
      As part of security robustness measure, this change enables data execution prevention (aka /NX) and address space layout randomization in windows version of the facter binaries. There was no specific known vulnerability but it minimizes chances of anyone exploiting any unknown vulnerabilities while taking advantage of above things.
    • QA Risk Assessment:
      Needs Assessment

      Description

      Enable NXCOMPAT and ASLR settings in windows binaries (exe/dlls) of facter.
      This is per a customer requirement to meet their security audit requirements. Presenting targeting v3.6.x (branch); might be propagated to other/later versions.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              jayant.sane Jayant Sane
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Zendesk Support