From owner-freebsd-fs@freebsd.org Tue Feb 14 20:21:35 2017 Return-Path: Delivered-To: freebsd-fs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4AB47CDFC84 for ; Tue, 14 Feb 2017 20:21:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3A15A1AAC for ; Tue, 14 Feb 2017 20:21:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id v1EKLYI5086906 for ; Tue, 14 Feb 2017 20:21:35 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-fs@FreeBSD.org Subject: [Bug 217062] for file systems mounted with -o noexec, exec=off property does not work for mmap Date: Tue, 14 Feb 2017 20:21:35 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 11.0-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: shamaz.mazum@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-fs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Feb 2017 20:21:35 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D217062 --- Comment #6 from shamaz.mazum@gmail.com --- (In reply to Konstantin Belousov from comment #4) Thanks for the fix. This discrepancy between mmap and mprotect made me think that there was a bug there. If you are interested, I noticed that, as I said before, trying to launch SBCL (Steel Bank Common Lisp) with a core image st= ored in my home no-exec file system. It failed to start because it maps core ima= ge in memory and then calls mprotect for those mappings. But when I opened a shared library using foreign functions interface, it worked perfectly (I believe dynamic linker uses mmap). > If you determined, there is nothing which could prevent you from mapping = anonymous memory, copying data from the file into it, and then executing. Yes, you are right. Too bad for my paranoia ;) --=20 You are receiving this mail because: You are the assignee for the bug.=