[lkml]   [1997]   [Apr]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: executable stacks, a few suggetions

> > i would suggest to turn executable stack off only for setuid exec()'s
> What about daemons? These are even more important, and, as I'm going to
> explain when posting the final patch, removed stack execution permission
> is possible to bypass in less cases when exploiting remotely than locally.

maybe we could temporarily add it as an ext2fs attribute? exec() honors
this attribute then, and installs the 'safe' code segment when building
the process.

if it's a custom patch, one can abuse all kinds of already existant ext2fs
attributes. [but maybe there is place for a new one?]

-- mingo

 \ /
  Last update: 2005-03-22 13:39    [W:0.065 / U:11.348 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site