[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] perl script drop



> On Montag, 12. Mai 2003 13:48, Peter Wiersig wrote:
>
> > mount options don't help when faced with scripts.
>
> they don´t even help when faced with binaries:

/dev/hda5 on /tmp type reiserfs (rw,noexec,nosuid,nodev)
cd /tmp
cp /bin/touch .
ls -al
-rwxr-xr-x    1 root     root        26504 May 12 16:06 touch
./touch a.txt
-bash: ./touch: Permission denied
touch a.txt
ls -al
-rw-r--r--    1 root     root            0 May 12 16:07 a.txt
-rwxr-xr-x    1 root     root        26504 May 12 16:06 touch

... so it looks like binaries are blocked (tested on SuSE 8.1).

Shell scripts are also blocked, perl scripts indeed run.

Cheers,
Andre


-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here