Re: [PATCH] Capabilities in elf

Pavel Machek (pavel@bug.ucw.cz)
Sat, 17 Apr 1999 16:08:57 +0200


Hi!

> > Here is next version, this one is believed NOT to contain security
> > hole. Please take a look, and comment i.e. post me things like "GREAT!
> > this is going to be included in 2.2.6".
>
> Few comments:
> FPUCW does not have to be exported to userland, unless it changes from the
> defaults glibc is aware of for the different architectures. That's

Sorry, part of other patch escaped me. I should have reversed it. I
did that now.

> has been decided between Linus and Ulrich, so there is no need to muck with
> that in your patch.
> Allocating such low PT_* value is really asking for trouble. One should use
> some high PT_* value in the allowable range.

Ook. 0xca9ab1e used as magic :-).

> I don't think Linus will take the patch if you accept there \x7fFLE as magic,
> it is really a hackish solution. No userland program will be able to cope
> with such executables.

I know. But do you have idea on other way to make executables
unexecutable for 2.0.x kernel?

> And of course, you'd need to remove all those printks from there to actually
> send it to Linus anyway.

:-) Of course. I one to have working capability, setter, first; than
to submit it to Linus. Jeremy Fitzhardinge already mailed me some code
to edit elf, I'll take a look.

Pavel

-- 
I'm really pavel@atrey.karlin.mff.cuni.cz. 	   Pavel
Look at http://atrey.karlin.mff.cuni.cz/~pavel/ ;-).

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/