Re: rtld and noexec

2011-12-04 Thread Kostik Belousov
On Sun, Dec 04, 2011 at 02:17:43PM +0100, joris dedieu wrote: > 2011/12/2 Alexander Kabaev : > > On Fri, 2 Dec 2011 18:22:57 +0100 > > joris dedieu wrote: > > > >> Hi, > >> > >> Here is a patch I use to prevent loading a shared object from a noexec > >> mountpoint.  It's an easy way, I found, afte

Re: rtld and noexec

2011-12-04 Thread joris dedieu
2011/12/2 Alexander Kabaev : > On Fri, 2 Dec 2011 18:22:57 +0100 > joris dedieu wrote: > >> Hi, >> >> Here is a patch I use to prevent loading a shared object from a noexec >> mountpoint.  It's an easy way, I found, after the last root exploit >> ((http://seclists.org/fulldisclosure/2011/Nov/452),

Re: rtld and noexec

2011-12-02 Thread Alexander Kabaev
On Fri, 2 Dec 2011 18:22:57 +0100 joris dedieu wrote: > Hi, > > Here is a patch I use to prevent loading a shared object from a noexec > mountpoint. It's an easy way, I found, after the last root exploit > ((http://seclists.org/fulldisclosure/2011/Nov/452), to enhance the > security of my web

rtld and noexec

2011-12-02 Thread joris dedieu
Hi, Here is a patch I use to prevent loading a shared object from a noexec mountpoint. It's an easy way, I found, after the last root exploit ((http://seclists.org/fulldisclosure/2011/Nov/452), to enhance the security of my web servers (with /home, /tmp and /var/tmp mounted with noexec). - the