Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Workaround: remount /proc nosuid,noexec

Posted Jul 17, 2006 16:14 UTC (Mon) by djrom (subscriber, #26074)
In reply to: Workaround: remount /proc nosuid,noexec by Los__D
Parent article: Lots more kernel releases

As usual, when someone suggests "noexec" for solving a security problem, it's not really a solution. It can't harm to do it anyway, but it's pretty easy to bypass. Just replace "/proc/executable" by "/lib/ld-linux.so.2 /proc/executable" and the exploit will work without a glitch.

(Log in to post comments)

Nope

Posted Jul 17, 2006 21:05 UTC (Mon) by JoeBuck (subscriber, #2330) [Link]

The exploit evidently is blocked if /proc is mounted nosuid. noexec has no effect.

Nope

Posted Jul 17, 2006 23:10 UTC (Mon) by djrom (subscriber, #26074) [Link]

Oops, I didn't checked for this precise exploit. I still think it's good to have it reminded as a general information on the usefulness of noexec mount option, but I stand corrected about for the exploit we were talking about :)