Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps

[Stas Sergeev]

Hello.

Alan Cox wrote:
> Agreed mprotect should also be fixed.
Since "noexec" was already rendered useless - yes.
Before, people could use it and hope the binaries
won't get executed (and if it was possible to execute
them by invoking ld.so directly, then ld.so could have
been fixed). Now the only possibility is to not use the
"noexec" at all.
So does that add to security or substract?..

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/