Re: Email based attack on University
On 2019-10-05, Keith Bainbridge <ke1th3216@gmail.com> wrote:
> I'm still lurking here, but not sure what this suggestion means.
He's not making one.
He's offering examples of the trivial circumvention of the noexec option
(but they all appear to be faulty for one reason or another).
> Please expand.
>
> On 5/10/19 1:22 am, Jonathan Dowland wrote:
>> On Wed, Oct 02, 2019 at 07:03:59PM +1000, Keith Bainbridge wrote:
>>> I wonder if having /home on a 'noexec' partition would stop this
>>> attack, please?
>>
>> I don't know specifically about this attack, but noexec is trivial to
>> circumvent. Here's three ways:
>>
>> bash -c "~/whatever"
>> cp ~/whatever /tmp && /tmp/whatever
>> /lib64/ld-linux-x86-64.so.2 ~/whatever
>>
>
>
--
"There are no foreign lands. It is the traveler only who is foreign."
-- Robert Louis Stevenson
Reply to: