linux-kernel - Re: Executability of the stack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <458165F3.90002@univ-paris12.fr>
Date:	Thu, 14 Dec 2006 15:55:47 +0100
From:	Franck Pommereau <pommereau@...v-paris12.fr>
To:	Arjan van de Ven <arjan@...radead.org>
CC:	James Courtier-Dutton <James@...erbug.co.uk>,
	linux-kernel@...r.keel.org
Subject: Re: Executability of the stack

Arjan van de Ven wrote:
>> Why not show both.
>> "intent" and "effective".
> 
> that would change the file format .. which is used by apps today already
> (including glibc)

So, what about having another file, say /proc/self/emaps (effective
maps) that would display how things are really set.

Currently, is there any solution to test for effective permission except
 by trying to execute something on the stack (thus crashing the program
on a successful test...)?

Arjan van de Ven also wrote in other mails:
> the "nx" shows that if you configure your kernel correctly (enable
> PAE) that you indeed have a non-executable capability, which will
> apply to the stack (and afaik the heap too)
[...]
> enable
> CONFIG_HIGHMEM64G=y
> and you're all set
[...]
> btw in case you didn't realize this; your processor is also 64 it
> capable, just use any x86-64 distribution on it ;)

Thanks for the tips!

Franck

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/