Re: execturing libc
Henrique de Moraes Holschuh <hmh@debian.org> writes:
> On Fri, 04 Feb 2005, Goswin von Brederlow wrote:
>> The way to circumvent a noexec is to call the dynamic linker like I
>> did for libc:
>>
>> /lib64/ld-linux-x86-64.so.2 <any file>
>
> Is it? In sid, ia32:
> /lib/ld-linux.so.2 ./test
> ./test: error while loading shared libraries: ./test: failed to map segment
> from shared object: Operation not permitted
>
> This is a noexec partition.
>
> /lib/ld-linux.so.2 /bin/ls
> test test.c test.sh
>
> This is an exec partition.
>
>
> The hole is/has being/been closed.
It still lets you execute files that don't have the executable flag
set like libc. It's a different bug but it's still there.
MfG
Goswin
Reply to: