Messages in this thread |  | | | Date | Sun, 24 Sep 2006 22:09:20 +0400 | | From | Stas Sergeev <> | | Subject | Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps |
| |
Ulrich Drepper wrote: > The consensus has been to add the same checks to mprotect. They were > not left out intentionally. But how about the anonymous mmap with PROT_EXEC set? This is exactly what the malicious loader will do, it won't do the shared (or private) file-backed mmap. So your technique doesn't restrict the malicious loaders, including the potential script loader you were referring to. It doesn't even make their life any harder. Only the properly-written programs suffer. Or, in case of ceasing to use noexec - the security.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |