[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#249305: Debian-installer, beta-4



On Sun, May 16, 2004 at 10:26:05PM +0300, Mika Bostr|m wrote:
> > There is absolutely no security benefit to noexec /tmp whatsoever.
> 
>   I know. It's trivial to call binaries through /lib/ld-linux.so and
> scripts via the actual shell. Any kind of attacker would circumvent the
> flag in about two seconds.

Not longer, the kernel denies exec mapings of files on noexec fs.

Bastian

-- 
There's coffee in that nebula!
		-- Capt. Kathryn Janeway, Star Trek: Voyager, "The Cloud"

Attachment: signature.asc
Description: Digital signature


Reply to: