Re: Unexecutable Stack / Buffer Overflow Exploits...

Dan Hollis (goemon@sasami.anime.net)
Wed, 29 Dec 1999 11:39:21 -0800 (PST)


On Wed, 29 Dec 1999, Arjan van de Ven wrote:
> I would like to see an option that does the folowing:
> 1) Let "normal user" programs bind to ports < 1024
> ONLY IF
> 2) that program was given this "capability" by root, for example
> by means of an file-system flag.

Actually someone made a patch to give traditional permissions to sockets
<1024, so you could chown/chgrp/chmod them to specific users. Far cleaner
solution in my opinion.

-Dan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/