lkml.org 
[lkml]   [2011]   [Mar]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Date
    SubjectRe: [Patch 1/1] fsnotify,fanotify: adding flag for execution
    On Thu, Mar 24, 2011 at 8:30 AM, Eric Paris <eparis@redhat.com> wrote:
    >
    > I keep waffling back and forth on this patch (for months now) mostly
    > because of the fact that I'm scared it will give people a false sense
    > that they will get notification of all files that might be executed.  I
    > don't understand the use case at all so I don't know if it good idea to
    > expose such notifications....

    We have indeed historically had those kinds of bugs. For example,
    having 'noexec' disable execve() on files, but *not* disabling using
    them as LD_PRELOAD=xyz things where they aren't the target of an
    execve(), but the code in them is run anyway (thanks to just an
    executable mmap(), or even a "read()" into a data segment that is
    executable)

    So I don't know what makes "executed" different from "read". Because
    at some point we really cannot tell the difference.

    The one special thing about execve() is that it can execute something
    even when it's not readable. But people who have depended on that as a
    security feature have always been disappointed (ie just execve it and
    then use ptrace to read the contents of the file _anyway_). So once
    again it's not at all clear that "execute" should ever be considered
    to be anything but "read".

    Linus
    --
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2011-03-25 02:21    [W:3.868 / U:0.000 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site