Subject: Re: chroot jail for ftpd
To: Jason R Thorpe <thorpej@wasabisystems.com>
From: Luke Mewburn <lukem@netbsd.org>
List: tech-security
Date: 10/18/2001 14:25:46
On Wed, Oct 17, 2001 at 09:20:03PM -0700, Jason R Thorpe wrote:
> On Wed, Oct 17, 2001 at 10:46:47PM -0400, Andrew Brown wrote:
> 
>  > what about not allowing executable mappings if the backing filesystem
>  > doesn't allow it?
> 
> That seems pretty sane, and should be pretty easy to do.

I've felt for a while that having a file system as noexec was useless
when mprotect(,,PROT_EXEC) was available. I just wasn't sure about the
implications of enforcing the semantics as you suggest, but I'm not
going to object to the change ;-)