[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Preventing execution of perl scripts in /tmp dierctory



also sprach Giacomo A. Catenazzi <cate@debian.org> [2007.06.06.1834 +0200]:
> If you can read a file you can execute it!
> simply way: copy into the home and change the permissions
> read-only way: for ELF files, execute
> /lib/ld-linux.so.2 /tmp/elf-program-withmode.644

Note that this does not work with kernel 2.6 if noexec is set.

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.   martin f. krafft <madduck@debian.org>
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems
 
"perhaps debian is concerned more about technical excellence rather
 than ease of use by breaking software. in the former we may excel.
 in the latter we have to concede the field to microsoft. guess
 where i want to go today?"
                                                 -- manoj srivastava

Attachment: signature.asc
Description: Digital signature (GPG/PGP)


Reply to: