Subject: Re: chroot jail for ftpd
To: Jason R Thorpe <firstname.lastname@example.org>
From: Luke Mewburn <email@example.com>
Date: 10/18/2001 14:25:46
On Wed, Oct 17, 2001 at 09:20:03PM -0700, Jason R Thorpe wrote:
> On Wed, Oct 17, 2001 at 10:46:47PM -0400, Andrew Brown wrote:
> > what about not allowing executable mappings if the backing filesystem
> > doesn't allow it?
> That seems pretty sane, and should be pretty easy to do.
I've felt for a while that having a file system as noexec was useless
when mprotect(,,PROT_EXEC) was available. I just wasn't sure about the
implications of enforcing the semantics as you suggest, but I'm not
going to object to the change ;-)