Ulrich Drepper wrote:
The consensus has been to add the same checks to mprotect. They were not left out intentionally.
But how about the anonymous mmap with PROT_EXEC set? This is exactly what the malicious loader will do, it won't do the shared (or private) file-backed mmap. So your technique doesn't restrict the malicious loaders, including the potential script loader you were referring to. It doesn't even make their life any harder. Only the properly-written programs suffer. Or, in case of ceasing to use noexec - the security. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- Follow-Ups:
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Denis Vlasenko <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: [email protected] (David Wagner)
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- References:
- [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Stas Sergeev <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Hugh Dickins <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Stas Sergeev <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Hugh Dickins <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Alan Cox <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Stas Sergeev <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Alan Cox <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Stas Sergeev <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Ulrich Drepper <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Stas Sergeev <[email protected]>
- Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- From: Ulrich Drepper <[email protected]>
- [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- Prev by Date: Re: 2.6.18 BUG: unable to handle kernel NULL pointer dereference at virtual address 000,0000a
- Next by Date: Re: sluggish system responsiveness under higher IO load
- Previous by thread: Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- Next by thread: Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
- Index(es):
 |