tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: [PATCH] fexecve



Julian Yon <julian%yon.org.uk@localhost> wrote:

> The spec only requires that the file only needs to be open for reading.

That is not completely clear to me. open(2) and openat(2) get a O_EXEC
flag, but I did not found other reference of it: fexecve(2)
specification does explicitely require a fd open with O_EXEC. 

We could have such a limitation, though: it requires real cooperation
between two the two processes if the opener needs to use O_EXEC and the
executer needs to call fexecve(2)

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu%netbsd.org@localhost


Home | Main Index | Thread Index | Old Index