Messages in this thread | | | From | Bodo Eggert <> | Subject | Re: Require mmap handler for a.out executables | Date | Thu, 27 Jul 2006 19:49:42 +0200 |
| |
Marcel Holtmann <marcel@holtmann.org> wrote:
> with the nasty /proc privilege escalation (CVE-2006-3626) it became > clear that we need to do something more to better protect us against > people exploiting stuff in /proc. Besides the don't allow chmod stuff, > Eugene also proposed to depend the a.out execution on the existence of > the mmap handler. Since we are doing the same for ELF, this makes > totally sense to me.
Can shell scripts or binfmt_misc be exploited, too? Even if not, I'd additionally force noexec, nosuid on proc and sysfs mounts. -- Ich danke GMX dafür, die Verwendung meiner Adressen mittels per SPF verbreiteten Lügen zu sabotieren.
http://david.woodhou.se/why-not-spf.html - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |