lkml.org 
[lkml]   [1998]   [Aug]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds
Date
From
David S. Miller wrote:

> Not only does it break nearly all existing elf ABI's I know of, it is
> a dirty and unclean implementation of the solution to top it off. Go
> more so down Sun's path, put bits in the ELF header which indicate
> this "extension" and then we'll be more open to such a solution
> hitting the main kernel sources...

Come on, David, do you think that we follow the ABI to the letter in
every respect? There must be some linux-typical behaviour that differs
from the spec? Why are these tolerated? Because it doesn't bother
anyone.

If there is some program that actually NEEDS the stack to be
executable, and isn't easily patched, then you have a valid point.
I remember a security patch that broke "init". "Well then, just patch
init" was the answer back then.

There are already ways to configure your Linux-kernel that make it
incompatible with this or that. What's the problem with "If you need
to run the xyz-interpreter, you cannot have the stack's not executable
feature turned on"? Life's about choices.

Roger.

--
Actor asks a collegue: "To what do you owe your success in acting?"
Answer: "Honesty. Once you've learned how to fake that, you've got it made."
-------- Custom Linux device drivers for sale! Call for a quote. ----------
Email: R.E.Wolff@BitWizard.nl || Tel: +31-15-2137555 || FAX: +31-15-2138217

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.047 / U:0.272 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site