lkml.org 
[lkml]   [1998]   [Aug]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds
On Tue, 4 Aug 1998, David S. Miller wrote:

> From: dgaudet-list-linux-kernel@arctic.org
> Date: Tue, 4 Aug 1998 14:43:15 -0700 (PDT)
>
> libc is remapped by the patch so that the most significant byte of
> the addresses are 0.
>
> Keep in mind that for some people, mappable address space size is a
> treasured reasource. Or is it only done for libc.so?

From the patch itself:

+#if defined(CONFIG_SECURE_STACK) && defined(CONFIG_BINFMT_ELF)
+extern struct linux_binfmt elf_format;
+#define MMAP_SEARCH_START ( \
+ current->binfmt == &elf_format && \
+ !(current->flags & PF_STACKEXEC_F) \
+ ? 0x00110000UL \
+ : TASK_SIZE / 3 )
+#else
#define MMAP_SEARCH_START (TASK_SIZE/3)
+#endif

It leaves the entire address space mappable. It just starts at a lower
address.

Dean


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.328 / U:0.020 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site