Re: How to make stack executable on demand?

From: H. J. Lu
Date: Fri Apr 16 2004 - 14:42:11 EST


On Fri, Apr 16, 2004 at 08:07:30PM +0200, Andreas Steinmetz wrote:
> H. J. Lu wrote:
> >is set with executable stack. Is there a third option that a process
> >starts with non-executable stack and can change the stack permission
> >later?
> >
>
> Well, in my opinion your request is equivalent to "keep all these cute
> buffer overflows forever". Take any protected app, LD_PRELOAD or drop in
> a bad/malicious library and your're done for good. Not really a good idea.

The current scheme doesn't work too well. Linker doesn't combine
PT_GNU_STACK from DSO:

http://sources.redhat.com/ml/binutils/2004-04/msg00341.html

for a reason. It expects the dynamic linker to do that at the run-time,
which kernel won't allow. I am looking for a reasonable solution.


H.J.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/