lkml.org 
[lkml]   [1997]   [Jun]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Non-Executable Stack Patch
Date
alan@lxorguk.ukuu.org.uk (Alan Cox) writes:
>
> A lot of stuff uses /tmp without due care and attention.

Tell me if I'm wrong, but aren't those bugs all of the "put some wild stuff
into /tmp and let it be overwritten" variety?

It seems to me that most (if not all) of these holes can be fixed by
(a) setting the t bit on /tmp and (b) patching the kernel not to follow
symlinks which are stored in a directory with the t bit set.

There's even a patch for (b) floating around.

--
The devil knew not what he did when he made man politic.
-- Shakespeare
--
Matthias Urlichs \ noris network GmbH / Xlink-POP Nürnberg
Schleiermacherstraße 12 \ Linux+Internet / EMail: urlichs@noris.de
90491 Nürnberg (Germany) \ Consulting+Programming+Networking+etc'ing
PGP: 1024/4F578875 1B 89 E2 1C 43 EA 80 44 15 D2 29 CF C6 C7 E0 DE
Click <A HREF="http://info.noris.de/~smurf/finger">here</A>. 42

\
 
 \ /
  Last update: 2005-03-22 13:39    [W:0.067 / U:0.400 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site