Gentoo Archives: gentoo-security

From: Wolfram Schlich <lists@×××××××××××××××.org>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] mount noexec and ro
Date: Sat, 04 Nov 2006 12:10:00
Message-Id: 20061104120327.ALLYOURBASEAREBELONGTOUS.B10856@bla.fasel.org
In Reply to: [gentoo-security] mount noexec and ro by Joe Knall
* Joe Knall <joe.knall@×××.net> [2006-11-04 11:52]:
> Hello, > > can/does mounting a partition with noexec, ro etc. provide additional > security or are those limitations easy to circumvent?
It only helps against scriptkiddie-attacks. '/lib/ld-linux.so.2 /tmp/somedynamicallylinkedbinary' still works. See http://www.seifried.org/lasg/installation/, section "Filesystem layout and structuring". -- Wolfram Schlich -- gentoo-security@g.o mailing list

Replies

Subject Author
Re: [gentoo-security] mount noexec and ro Eduardo Tongson <propolice@×××××.com>