Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261192AbVAMIXg (ORCPT ); Thu, 13 Jan 2005 03:23:36 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261215AbVAMIXg (ORCPT ); Thu, 13 Jan 2005 03:23:36 -0500 Received: from [213.146.154.40] ([213.146.154.40]:45199 "EHLO pentafluge.infradead.org") by vger.kernel.org with ESMTP id S261192AbVAMIXc (ORCPT ); Thu, 13 Jan 2005 03:23:32 -0500 Date: Thu, 13 Jan 2005 08:23:20 +0000 From: Christoph Hellwig To: Linus Torvalds Cc: Dave Jones , Andrew Morton , marcelo.tosatti@cyclades.com, Greg KH , chrisw@osdl.org, Alan Cox , Kernel Mailing List Subject: Re: thoughts on kernel security issues Message-ID: <20050113082320.GB18685@infradead.org> Mail-Followup-To: Christoph Hellwig , Linus Torvalds , Dave Jones , Andrew Morton , marcelo.tosatti@cyclades.com, Greg KH , chrisw@osdl.org, Alan Cox , Kernel Mailing List References: <20050112185133.GA10687@kroah.com> <20050112161227.GF32024@logos.cnet> <20050112205350.GM24518@redhat.com> <20050112182838.2aa7eec2.akpm@osdl.org> <20050113033542.GC1212@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-SRS-Rewrite: SMTP reverse-path rewritten from by pentafluge.infradead.org See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 617 Lines: 13 On Wed, Jan 12, 2005 at 08:48:57PM -0800, Linus Torvalds wrote: > Without that capability set, you can only execute binaries that you cannot > write to, and that you cannot _get_ write permission to (ie you can't be > the owner of them either - possibly only binaries where the owner is > root). I think this is called "mount user-writeable filesystems with -noexec" ;-) - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/