Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps



On Sat, 2006-09-30 at 13:42 +0400, Stas Sergeev wrote:
Hello.

Arjan van de Ven wrote:
/ wants to be able to mark more partitions as noexec,/
.... and then execute from them!
that's what is bothering me most about all of this.
Do you mean "execute with ld.so", or "execute with PROT_EXEC mmap"?

no what bothers me that on the one hand you want no execute from the
partition, and AT THE SAME TIME want stuff to execute from there (being
libraries or binaries, same thing to me). That duality feels strange to
me, I could understand if you wanted noexec to be MORE strict; I fail to
understand why you want it LESS strict!
What breaks?


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



Relevant Pages

  • Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
    ... Arjan van de Ven wrote: ... that's what is bothering me most about all of this. ... no execute permission, which is what an mmap hack doesn't solve. ...
    (Linux-Kernel)
  • Re: Spamassassin on Debian HOWTO?
    ... When I execute this line: ... I've never used chroot before, ... Sorry to keep bothering everyone. ... To UNSUBSCRIBE, email to debian-user-request@lists.debian.org ...
    (Debian-User)
  • Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
    ... partition, and AT THE SAME TIME want stuff to execute from there (being ... IMHO there should be some policy that can be achieved. ... suggests that there is no strict policy at all any more. ...
    (Linux-Kernel)
  • Re: Subroutines and &
    ... # else execute this sub ... You are making sure that $MODE points to a sub, ... no strict 'refs'; ... only be used with the code-determined qw(Foo Bar Baz). ...
    (comp.lang.perl.misc)
  • Re: print to file
    ... That script shouldn't execute, there are several mistakes. ... use strict; ...
    (comp.lang.perl.misc)