Compartmentalized computing with CLIP OS
Compartmentalized computing with CLIP OS
Posted Oct 30, 2018 10:22 UTC (Tue) by Villemoes (subscriber, #91911)Parent article: Compartmentalized computing with CLIP OS
Can't O_MAYEXEC be implemented in userspace with fstatvfs() on the opened file and checking struct statvfs::f_flag? Compared to the work already needed for each interpreter (not just adding O_MAYEXEC, but also disabling -e and executing from stdin etc.) copy-pasting a simple openat_mayexec() wrapper seems quite simple.