| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <46856F24.5060407@andrei.myip.org> Date: Fri, 29 Jun 2007 13:44:20 -0700 From: Florin Andrei <florin@...rei.myip.org> To: linux-kernel@...r.kernel.org Subject: how to determine if the noexec stack is defined by an application I'm reading Ingo's NX quick start document: http://people.redhat.com/mingo/nx-patches/QuickStart-NX.txt Quote: "If an application defines a noexec stack then the kernel will enforce this executability, and all attempts to execute on the stack will be prevented by the hardware." My question is related to the conditional "if an application". So it looks like it depends on the app. Now, the OS/hardware combination that I'm using (RHEL4 WS 32 bit on AMD64 CPU - long story, don't ask) definitely enables NX: # grep -i nx /var/log/dmesg NX (Execute Disable) protection: active But it's running a Web service which is a combination of C code and Tomcat/Java. I have no clue how to determine which portions specify a noexec stack and which don't. In case it turns out some portions do not specify a noexec stack, my next question is how to get the application to create a noexec stack (assume I can make that request to the developers). (please do NOT Cc me, I'm subscribed to the list) -- Florin Andrei http://florin.myip.org/ - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists