On Mon, 19 Jan 2004 [EMAIL PROTECTED] wrote:
>> Easy one. Execute "/lib/ld-linux.so.2 /tmp/code".
> This long-standing issue is fixed in the Linux 2.6.0 kernel.
How is it an issue? I think it is a feature - it is noexec that is pretty
badly broken by design, and nearly impossible to render secure... and what
does Linux kernel have to do with addressing it?
Disclaimer: I don't have 2.6 sources at hand, maybe this is the case
(although I somehow doubt there is a reasonable way to fix it kernel -
how, by refusing PROT_EXEC mappings from files on noexec partitions? hope
not).
--
------------------------- bash$ :(){ :|:&};: --
Michal Zalewski * [http://lcamtuf.coredump.cx]
Did you know that clones never use mirrors?
--------------------------- 2004-01-19 19:58 --
http://lcamtuf.coredump.cx/photo/current/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
