tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: [PATCH] fexecve



On Thu, Nov 15, 2012 at 05:18:04PM -0600, Eric Haszlakiewicz wrote:
> 
> Well setuid executables seem like a special case, but other than that, I
> think I can probably manage to execute something without an exec call.
> In fact I know I can, just by linking against any dynamic library and
> calling one of the functions in it.

You can't load a dynamic library that's on a filesystem mounted noexec.

Thor


Home | Main Index | Thread Index | Old Index