From owner-freebsd-security@FreeBSD.ORG Sat Sep 24 07:32:21 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B9D5616A41F for ; Sat, 24 Sep 2005 07:32:21 +0000 (GMT) (envelope-from simon@zaphod.nitro.dk) Received: from nfishbone.nitro.dk (cpe.atm2-0-71337.0x535ccf26.taanxx2.customer.tele.dk [83.92.207.38]) by mx1.FreeBSD.org (Postfix) with ESMTP id 53A4E43D4C for ; Sat, 24 Sep 2005 07:32:20 +0000 (GMT) (envelope-from simon@zaphod.nitro.dk) Received: from zaphod.nitro.dk (localhost [127.0.0.1]) by nfishbone.nitro.dk (Postfix) with ESMTP id CBA8F61C29; Sat, 24 Sep 2005 09:32:18 +0200 (CEST) Received: by zaphod.nitro.dk (Postfix, from userid 3000) id 6E7BF119EB; Sat, 24 Sep 2005 09:32:20 +0200 (CEST) Date: Sat, 24 Sep 2005 09:32:20 +0200 From: "Simon L. Nielsen" To: markzero Message-ID: <20050924073219.GA854@zaphod.nitro.dk> References: <43332CD7.4070107@romab.com> <726F1E71-D4D9-4C34-848D-868C1158834E@sarenet.es> <43345736.3090602@gugol.ru> <20050923215556.GB72838@logik.internal.network> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wRRV7LY7NUeQGEoC" Content-Disposition: inline In-Reply-To: <20050923215556.GB72838@logik.internal.network> User-Agent: Mutt/1.5.10i Cc: freebsd-security@freebsd.org Subject: Re: mounting filesystems with "noexec" X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Sep 2005 07:32:21 -0000 --wRRV7LY7NUeQGEoC Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2005.09.23 22:55:56 +0100, markzero wrote: > With all that has been said so far, what is the actual point of > the noexec flag?=20 =46rom mount(8) (yes I like quoting the docs. when we have them ;) ): This option is useful for a server that has file systems containing binaries for architectures other than its own. --=20 Simon L. Nielsen --wRRV7LY7NUeQGEoC Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFDNQEDh9pcDSc1mlERAumzAJ0QGIRLfVTxRu6EnXMZRxXcE8ujAwCeLwde 83+9ZuFZKwzO9I8sYRgvzVA= =Xw8B -----END PGP SIGNATURE----- --wRRV7LY7NUeQGEoC--