OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: mmap(), security and /dev/zero

From: David Laight (davidl8s.co.uk)
Date: Wed Jun 23 2004 - 15:24:48 CDT


> "Not exactly". I believe we decided to not require the x bit on files
> backing executable mappings, because this would be a painful user-visible
> change (every shared object on the system would require x added to its
> permissions).

Yes - If 'x' were required then the shell (etc) will try to execute them.....
Requiring 'x' basically gives little or no (obvious) benefits, and a lot
of problems.

Of course it might be useful to be able to 'write-lock' shared libraries
(so writes generate ETXTBSY).

        David

--
David Laight: davidl8s.co.uk