Re: [RFC PATCH v1 0/5] Add support for O_MAYEXEC

From: Florian Weimer
Date: Wed Dec 12 2018 - 15:13:28 EST

* James Morris:

> If you're depending on the script interpreter to flag that the user may
> execute code, this seems to be equivalent in security terms to depending
> on the user. e.g. what if the user uses ptrace and clears O_MAYEXEC?

The argument I've heard is this: Using ptrace (and adding the +x
attribute) are auditable events.