Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps

From: Stas Sergeev
Date: Sun Sep 24 2006 - 14:08:33 EST

Ulrich Drepper wrote:
The consensus has been to add the same checks to mprotect. They were
not left out intentionally.
But how about the anonymous mmap with PROT_EXEC set?
This is exactly what the malicious loader will do, it
won't do the shared (or private) file-backed mmap.
So your technique doesn't restrict the malicious
loaders, including the potential script loader you
were referring to. It doesn't even make their life
any harder. Only the properly-written programs suffer.
Or, in case of ceasing to use noexec - the security.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at