lkml.org 
[lkml]   [2001]   [Oct]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: Security question: "Text file busy" overwriting executables but not shared libraries?
    From
    Date

    Wow what a wild spin off of my stream of consciousness.

    Linus Torvalds <torvalds@transmeta.com> writes:

    > On 4 Oct 2001, Eric W. Biederman wrote:
    > >
    > > First what user space really wants is the MAP_COPY. Which is
    > > MAP_PRIVATE with the guarantee that they don't see anyone else's changes.
    >
    > Which is a completely idiotic idea, and which is only just another example
    > of how absolutely and stunningly _stupid_ Hurd is.

    Well in this case it is Mach not Hurd, and I wouldn't be suprised if
    you could find MAP_COPY in selected BSDs. The semantics wanted are
    very reasonable. You only want to see your changes to a given file.
    In practice there is no reason that anyone needs to actually change
    the file so MAP_PRIVATE | MAP_DENYWRITE is much more sensible (at
    least implementation wise).

    > The thing with MAP_COPY is that how do you efficiently _detect_ somebody
    > elses changes on a page that you haven't even read in yet?

    Definentily.

    > Trust me. The people who came up with MAP_COPY were stupid. Really. It's
    > an idiotic concept, and it's not worth implementing.

    I quite agree that MAP_COPY is not worth implementing. And I never
    said otherwise. I only mentioned so I could think what the
    alternatives where and what it's benefits really were.

    > And this all for what is a administration bug in the first place.

    Probably. I can't think of any other cases where this could trigger.

    However I think is is sensible to export MAP_DENYWRITE to user space.
    It cheaply closes the administration bug, it is partially exported
    already, and can even allow dynamic loaders to follow the kernel
    noexec policy.

    The latter looks like an actual advantage over MAP_COPY. Though
    somehow MAP_EXECUTABLE sounds like a better name...

    Eric

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:04    [W:4.079 / U:0.040 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site