Subject: Re: chroot jail for ftpd
To: Jason R Thorpe <>
From: Luke Mewburn <>
List: tech-kern
Date: 10/18/2001 14:25:46
On Wed, Oct 17, 2001 at 09:20:03PM -0700, Jason R Thorpe wrote:
> On Wed, Oct 17, 2001 at 10:46:47PM -0400, Andrew Brown wrote:
>  > what about not allowing executable mappings if the backing filesystem
>  > doesn't allow it?
> That seems pretty sane, and should be pretty easy to do.

I've felt for a while that having a file system as noexec was useless
when mprotect(,,PROT_EXEC) was available. I just wasn't sure about the
implications of enforcing the semantics as you suggest, but I'm not
going to object to the change ;-)