Messages in this thread | | | From | (David Wagner) | Subject | Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps | Date | Wed, 4 Oct 2006 21:31:43 +0000 (UTC) |
| |
Stas Sergeev wrote: >The primary goal is to make access() to respect the "noexec".
Unfortunately, access() is insecure by design -- it is inherently susceptible to race conditions (TOCTTOU attacks). Therefore, I don't think it is useful for enforcing security restrictions (such as enforcing noexec in ld.so). - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |