OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: mmap(), security and /dev/zero

From: Bill Studenmund (wrstudennetbsd.org)
Date: Thu Jun 24 2004 - 14:19:51 CDT

On Thu, Jun 24, 2004 at 10:58:54AM +0200, Alan Barrett wrote:
> How does the following compromise sound?
>
> shlibs must be in files that have "r" permission.
> shlibs must be on file systems that honour "x" permission
> (that is, were not mounted with the noexec option).

I think that sounds quite reasonable. And I don't think it'd be too hard
to implement.

Take care,

Bill

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)

iD8DBQFA2ylXWz+3JHUci9cRAnCFAJ9AkMvEq3OqM1vg4+aX0vcKNUUQvgCfR6nj
gx/avvB+BLEeiXNbDsFB+rk=
=2prj
-----END PGP SIGNATURE-----