Re: [PATCH] fexecve

To: Thor Lancelot Simon <tls%panix.com@localhost>
Subject: Re: [PATCH] fexecve
From: Emmanuel Dreyfus <manu%netbsd.org@localhost>
Date: Thu, 15 Nov 2012 17:23:04 +0000

On Thu, Nov 15, 2012 at 11:03:15AM -0500, Thor Lancelot Simon wrote:
> This strikes me as profoundly dangerous.  Among other things, it
> means you can't allow any program running in a chroot to receive
> unix-domain messages any more since they might get passed a file
> descriptor to code they should not be able to execute.

We can restrict it to VREG vnodes.

-- 
Emmanuel Dreyfus
manu%netbsd.org@localhost

Follow-Ups:
- Re: [PATCH] fexecve
  - From: Thor Lancelot Simon

References:
- [PATCH] fexecve
  - From: Emmanuel Dreyfus
- Re: [PATCH] fexecve
  - From: Thor Lancelot Simon

Prev by Date: Re: [PATCH] fexecve
Next by Date: Re: [PATCH] fexecve
Previous by Thread: Re: [PATCH] fexecve
Next by Thread: Re: [PATCH] fexecve
Indexes:

Home | Main Index | Thread Index | Old Index