Messages in this thread | | | From | (David Wagner) | Subject | Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps | Date | Mon, 25 Sep 2006 20:12:06 +0000 (UTC) |
| |
Arjan van de Ven wrote: >[...] so you remove a security check ... [...] > >If you can mmap PROT_EXEC the "noexec" mount option doesn't mean >anything! Because a elf binary loader is easily written in >perl/shell/whatever, the kernel "x" bit is just a convenience there! >The PROT_EXEC check at least makes it a bit harder to do anything like >this; not impossible obviously
The last sentence of your post implies that this never was a security check. (I'll believe it was a check to prevent some kinds of accidental misbehavior, but I don't believe it prevents deliberate misbehavior.) - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |