Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps

From: Stas Sergeev
Date: Sun Sep 24 2006 - 16:21:11 EST


Hello.

Denis Vlasenko wrote:
If attacker has malicious loaders on the system,
the situation is already sort of hopeless.
Stas, I think noexec mounts are meant to prevent
_accidental_ execution of binaries/libs from that
filesystem.
In the past - yes. The problem is that this behaveour
was changed, which is this discussion all about.

If user wants to execute binary blob from that fs
bad enough, he will do it. Maybe just by
copying file first to /tmp.
Not if you mount /tmp with noexec too. At least until
the loader script is written, which is probably some
time ahead. :)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/