All of lore.kernel.org
 help / color / mirror / Atom feed
From: Vasiliy Kulikov <segoon@openwall.com>
To: kernel-hardening@lists.openwall.com
Subject: Re: [kernel-hardening] GNU_STACK policy problem
Date: Tue, 26 Jul 2011 16:07:04 +0400	[thread overview]
Message-ID: <20110726120704.GA3912@albatros> (raw)
In-Reply-To: <20110724140631.GA18345@openwall.com>

Solar, Eugene,

On Sun, Jul 24, 2011 at 18:06 +0400, Solar Designer wrote:
> On Sun, Jul 24, 2011 at 12:39:07PM +0400, Vasiliy Kulikov wrote:
> > On Sat, Jul 23, 2011 at 19:06 +0400, Solar Designer wrote:
> > > I started looking into this, and here's what I found in RHEL 5 kernels:
> > 
> > Very interesting.  The same code is present in RHEL 6.  However, I don't
> > see the problem of GNU_STACK in DSOs is somehow solved.  Maybe RHEL 6
> > glibc has appropriate patches for loader?
> 
> I don't know.  Please take a look.

I failed to find anything GNU_STACK related in RHEL6 glibc patches.
Weird.  Probably they really decided to enforce NX GNU_STACK of binaries
only, leaving libraries' GNU_STACK as is (without NX enforcement)
because of the same reasons.

Thanks,

-- 
Vasiliy

  reply	other threads:[~2011-07-26 12:07 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-07-18 19:48 [kernel-hardening] GNU_STACK policy problem Vasiliy Kulikov
2011-07-21 13:03 ` [kernel-hardening] " Vasiliy Kulikov
2011-07-23 15:06 ` [kernel-hardening] " Solar Designer
2011-07-24  8:39   ` Vasiliy Kulikov
2011-07-24 14:06     ` Solar Designer
2011-07-26 12:07       ` Vasiliy Kulikov [this message]
2011-07-23 15:37 ` Solar Designer
2011-08-22  9:34   ` Vasiliy Kulikov
2011-08-22  9:41     ` Solar Designer

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20110726120704.GA3912@albatros \
    --to=segoon@openwall.com \
    --cc=kernel-hardening@lists.openwall.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.