| Date | Wed, 19 Jul 2017 19:42:53 +1000 (AEST) | From | James Morris <> | Subject | Re: [PATCH v3 14/15] exec: Use sane stack rlimit under secureexec |
| |
On Tue, 18 Jul 2017, Kees Cook wrote:
> For a secureexec, before memory layout selection has happened, reset the > stack rlimit to something sane to avoid the caller having control over > the resulting layouts. > > $ ulimit -s > 8192 > $ ulimit -s unlimited > $ /bin/sh -c 'ulimit -s' > unlimited > $ sudo /bin/sh -c 'ulimit -s' > 8192 > > Cc: Linus Torvalds <torvalds@linux-foundation.org> > Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: James Morris <james.l.morris@oracle.com>
-- James Morris <jmorris@namei.org>
|