|
|
Subscribe / Log in / New account

Compartmentalized computing with CLIP OS

Compartmentalized computing with CLIP OS

Posted Oct 30, 2018 10:22 UTC (Tue) by Villemoes (subscriber, #91911)
Parent article: Compartmentalized computing with CLIP OS

Can't O_MAYEXEC be implemented in userspace with fstatvfs() on the opened file and checking struct statvfs::f_flag? Compared to the work already needed for each interpreter (not just adding O_MAYEXEC, but also disabling -e and executing from stdin etc.) copy-pasting a simple openat_mayexec() wrapper seems quite simple.


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds