Date: Wed, 2 Nov 2005 15:41:26 +0000 From: db <db@traceroute.dk> To: "Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?=" <des@des.no>, freebsd-security@freebsd.org Subject: Re: Non-executable stack Message-ID: <200511021541.26986.db@traceroute.dk> In-Reply-To: <86pspjz0xu.fsf@xps.des.no> References: <200510270608.51571.db@traceroute.dk> <200510291412.57656.db@traceroute.dk> <86pspjz0xu.fsf@xps.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday 02 November 2005 12:30, you wrote: > Not quite. IA32 can make individual segments readable, writable and / > or executable, but lacks the ability to do so on a per-page basis. > Since we have trampoline code at the top of the stack, the entire > stack segment must be executable. Moving the trampoline off the stack > would solve the problem on all platforms. > > W^X across the board is not an option - it would break HotSpot and > other JIT-based software. Ah I see, but how about making the patch without touching the trampoline code section? I'm not talking about doing it on all platforms (if ia32 sucks) or making it default, just to give us security minded admins and users a kernel option. br db
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200511021541.26986.db>