Messages in this thread | | | Date | Sun, 31 Aug 2003 16:01:16 -0700 (PDT) | From | Linus Torvalds <> | Subject | Re: [PATCH]: non-readable binaries - binfmt_misc 2.6.0-test4 |
| |
On Mon, 1 Sep 2003, Zach, Yoav wrote: > > The proposed patch solves a problem for interpreters that need to > execute a non-readable file, which cannot be read in userland. To handle > such cases the interpreter must have the kernel load the binary on its > behalf.
I don't like the security issues here. Sure, you "trust" the interpreter, and clearly only root can set the flag, but to me that just makes me wonder why the interpreter itself can't be a simple suid wrapper that does the mapping rather than having it done in kernel space..
Linus
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |