Subject: Re: chroot jail for ftpd
To: Thor Lancelot Simon <tls@rek.tjls.com>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: tech-security
Date: 10/18/2001 14:38:36
On Thu, Oct 18, 2001 at 04:47:30PM -0400, Thor Lancelot Simon wrote:

 > > I've got a feeling that the problem we really want to fix is shared
 > > libs on noexec filesystems, not shared libs minus the execute bit
 > > in the file system...
 > 
 > Yeah, let's do a special-purpose hack instead of actually enforcing the
 > consistent rule that executable code has to come from an executable file.

Nevermind that you could mmap w/ PROT_READ only, allocate a new
buffer, copy the code there, mprotect() it, etc.

-- 
        -- Jason R. Thorpe <thorpej@wasabisystems.com>