Messages in this thread | | | Date | Thu, 30 Dec 1999 21:56:27 +0100 | From | Richard Zidlicky <> | Subject | Re: Unexecutable Stack / Buffer Overflow Exploits... |
| |
On Wed, Dec 29, 1999 at 11:27:33AM -0800, Dan Hollis wrote: > On Wed, 29 Dec 1999, Robert Dinse wrote: > > And it's a layer... Nothing is 100%, but the more layers a perp has to > > get through to gain access, the better the odds that they won't succeed. > > And I dont see any reason why this cant be a kernel compile option. If you > dont like it, dont enable it. I suspect the vast majority of users will > enable it though. I know I would.
Why not even make it a runtime option, programs get nonexec stack by default and could do some mmap or other syscall if they realy needed the stack or some portion of it executable. Are there any technical difficulties I am overlooking?
Bye Richard
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |