lkml.org 
[lkml]   [1999]   [Dec]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Unexecutable Stack / Buffer Overflow Exploits...
On Wed, Dec 29, 1999 at 11:27:33AM -0800, Dan Hollis wrote:
> On Wed, 29 Dec 1999, Robert Dinse wrote:
> > And it's a layer... Nothing is 100%, but the more layers a perp has to
> > get through to gain access, the better the odds that they won't succeed.
>
> And I dont see any reason why this cant be a kernel compile option. If you
> dont like it, dont enable it. I suspect the vast majority of users will
> enable it though. I know I would.

Why not even make it a runtime option, programs get nonexec stack by default
and could do some mmap or other syscall if they realy needed the stack or
some portion of it executable.
Are there any technical difficulties I am overlooking?

Bye
Richard

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:55    [W:0.083 / U:0.052 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site