Hello.
Denis Vlasenko wrote:
If attacker has malicious loaders on the system,
the situation is already sort of hopeless.
Stas, I think noexec mounts are meant to prevent
_accidental_ execution of binaries/libs from that
filesystem.
In the past - yes. The problem is that this behaveour
was changed, which is this discussion all about.
If user wants to execute binary blob from that fs
bad enough, he will do it. Maybe just by
copying file first to /tmp.
Not if you mount /tmp with noexec too. At least until
the loader script is written, which is probably some
time ahead. :)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
