Received-SPF: pass (google.com: domain of linux-kernel+bounces-52997-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99;
From: Kees Cook <keescook@chromium.org>
To: linux-kernel@vger.kernel.org,
	Max Filippov <jcmvbkbc@gmail.com>
Cc: Kees Cook <keescook@chromium.org>,
	Chris Zankel <chris@zankel.net>,
	Alexander Viro <viro@zeniv.linux.org.uk>,
	Christian Brauner <brauner@kernel.org>,
	Eric Biederman <ebiederm@xmission.com>,
	linux-fsdevel@vger.kernel.org,
	linux-mm@kvack.org,
	Greg Ungerer <gerg@linux-m68k.org>,
	Geert Uytterhoeven <geert@linux-m68k.org>
Subject: Re: [PATCH] fs: binfmt_elf_efpic: don't use missing interpreter's properties
Date: Mon,  5 Feb 2024 08:15:31 -0800
Message-Id: <170714972859.1382644.2755936263342477379.b4-ty@chromium.org>
In-Reply-To: <20240118150637.660461-1-jcmvbkbc@gmail.com>
References: <20240118150637.660461-1-jcmvbkbc@gmail.com>
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

On Thu, 18 Jan 2024 07:06:37 -0800, Max Filippov wrote:
> Static FDPIC executable may get an executable stack even when it has
> non-executable GNU_STACK segment. This happens when STACK segment has rw
> permissions, but does not specify stack size. In that case FDPIC loader
> uses permissions of the interpreter's stack, and for static executables
> with no interpreter it results in choosing the arch-default permissions
> for the stack.
> 
> [...]

Applied to for-next/execve, thanks!

[1/1] fs: binfmt_elf_efpic: don't use missing interpreter's properties
      https://git.kernel.org/kees/c/15fd1dc3dadb

Take care,

-- 
Kees Cook