Messages in this thread | | | Subject | Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds | Date | Wed, 5 Aug 1998 08:54:21 +0200 (MEST) | From | (Rogier Wolff) |
| |
David S. Miller wrote:
> Not only does it break nearly all existing elf ABI's I know of, it is > a dirty and unclean implementation of the solution to top it off. Go > more so down Sun's path, put bits in the ELF header which indicate > this "extension" and then we'll be more open to such a solution > hitting the main kernel sources...
Come on, David, do you think that we follow the ABI to the letter in every respect? There must be some linux-typical behaviour that differs from the spec? Why are these tolerated? Because it doesn't bother anyone.
If there is some program that actually NEEDS the stack to be executable, and isn't easily patched, then you have a valid point. I remember a security patch that broke "init". "Well then, just patch init" was the answer back then.
There are already ways to configure your Linux-kernel that make it incompatible with this or that. What's the problem with "If you need to run the xyz-interpreter, you cannot have the stack's not executable feature turned on"? Life's about choices.
Roger.
-- Actor asks a collegue: "To what do you owe your success in acting?" Answer: "Honesty. Once you've learned how to fake that, you've got it made." -------- Custom Linux device drivers for sale! Call for a quote. ---------- Email: R.E.Wolff@BitWizard.nl || Tel: +31-15-2137555 || FAX: +31-15-2138217
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html
| |