Re: linux bugs (survival stories)?

[Valdis.Kletnieks () vt edu]

On Tue, 12 Apr 2005 22:21:43 -0000, Eduardo Tongson said:

> % sudo mount -o remount,noexec /tmp
> % wget http://pornadmin.net/~tongson/linux/helloworld.bin -O /tmp/helloworld.
bin
> % /lib/ld-linux.so.2 /tmp/helloworld.bin
> Hello world!

# uname -a
Linux turing-police.cc.vt.edu 2.6.12-rc2-mm3 #1 PREEMPT Mon Apr 11 23:01:01 EDT 2005 i686 i686 i386 GNU/Linux
# id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) context=root:sysadm_r:sysadm_t
# mount -o remount,noexec /tmp
# cat > hello2.c
##include <stdio.h>
int main(int argc, char *argv[])   
{       
  printf("Hello world!\n");
  return 0;
}
# gcc -o /tmp/helloworld hello2.c
# ls -l /tmp/helloworld
-rwxr-xr-x  1 root root 4704 Apr 12 22:05 /tmp/helloworld
# /lib/ld-linux.so.2 /tmp/helloworld
/tmp/helloworld: error while loading shared libraries: /tmp/helloworld: failed to map segment from shared object: 
Operation not permitted
# chmod 644 /tmp/helloworld
# /lib/ld-linux.so.2 /tmp/helloworld
/tmp/helloworld: error while loading shared libraries: /tmp/helloworld: failed to map segment from shared object: 
Operation not permitted

Like I said, this one was closed with Ulrich Drepper's patch applied in 2.6.0,
which was released on Dec 17, 2003.  So it's only been fixed for some 15 months
or so in the current stable kernel.

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/