Re: [RFC] prevention of syscalls from writable segments, breaking bug exploits

Andi Kleen (ak@suse.de)
Thu, 4 Jan 2001 02:51:53 +0100


On Wed, Jan 03, 2001 at 04:54:38PM -0500, Alexander Viro wrote:
>
> Win: 0
> Loss: cost of find_vma() (and down(&mm->mmap_sem), BTW) on every system

It could actually be optimized a lot, e.g. by just read/writing to a byte
in the caller's current code page and handling the exception.

But I agree with you that it's rather useless. It'll break some existing
exploits, but it's so easy to workaround that exploit writers would quickly
adapt and then you have a ugly check with no purpose after a few weeks.

-Andi
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/