lkml.org 
[lkml]   [1997]   [Jun]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Non-Executable Stack Patch

    Hi,

    > I think it's really ashame that the non-executable stack patch doesn't
    > seem to be making it's way into the kernel as an option.
    > I think this is a place where Linux could really have an edge on many
    > other UNIX systems.
    > At our university these kind of security patches are very very desirable.
    > We even use some much worse patch for Slowlaris to accompilsh the same
    > thing (on systems with 5000 shell accounts)

    Well, the patch helps to improve the security, but only _a_bit_ as you can
    simply exploit buffer overruns without any need to put code on the stack by
    overwriting a return address with a pointer to some interesting place in libc (remember
    that libc contains glue functions for almost all kernel functions including
    very interesting ones such as exec) and pass any parameters you wish. Such
    exploits are unstoppable by any kind of stack protection patches.

    In addition to this, such patch could even decrease system security as lots
    of people believe it solves the problems and then they're much less aware
    of old buggy versions of suid programs containing the overruns.

    Martin

    \
     
     \ /
      Last update: 2005-03-22 13:39    [W:6.181 / U:0.184 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site