Re: mprotect abuse in slim

[Arjan van de Ven]

> Starting with the fdtable, would it help if we move the 
> fdtable tweaking out of slim itself and into helpers?  Or
> can you recommend another way to implement this functionality.

Hi,

maybe this is a silly question, but do you revoke not only the current
fd entries, but also the ones that are pending in UNIX domain sockets
and that are already being sent to the process? If not.. then you might
as well not bother ;)

Greetings,
   Arjan van de Ven
-- 
if you want to mail me at work (you don't), use arjan (at) linux.intel.com
Test the interaction between Linux and your BIOS via http://www.linuxfirmwarekit.org

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/