[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <alpine.DEB.2.22.1.446.2006232231410.3892@trent.utfs.org>
Date: Tue, 23 Jun 2020 22:34:57 -0700 (PDT)
From: Christian Kujau <lists@...dbynature.de>
To: Kees Cook <keescook@...omium.org>
cc: Alexey Dobriyan <adobriyan@...il.com>,
Andrew Morton <akpm@...ux-foundation.org>,
Willy Tarreau <w@....eu>,
Dan Carpenter <dan.carpenter@...cle.com>,
linux-kernel@...r.kernel.org
Subject: Re: process '/usr/bin/rsync' started with executable stack
On Tue, 23 Jun 2020, Kees Cook wrote:
> > If you run something with exec stack after the message
> > you shouldn't get it second time.
>
> If you want to reset this flag, you can do:
> # echo 1 > /sys/kernel/debug/clear_warn_once
Thanks. Although, I tend to not mount /sys/kernel/{config,debug,tracing}
and other things, I always thought they are not needed and could maybe
lower the attack surface if not mounted. Or maybe my tinfoil hat needs
some adjustment...
Christian.
--
BOFH excuse #279:
The static electricity routing is acting up...
Powered by blists - more mailing lists