]> git.ipfire.org Git - thirdparty/systemd.git/commit - man/systemd.exec.xml
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d4a4867) | patch
seccomp: also block shmat(..., SHM_EXEC) for MemoryDenyWriteExecute 4495/head
authorTopi Miettinen <toiwoton@gmail.com>
Wed, 26 Oct 2016 15:52:53 +0000 (18:52 +0300)
committerTopi Miettinen <toiwoton@gmail.com>
Wed, 26 Oct 2016 15:59:14 +0000 (18:59 +0300)
commitd2ffa389b8112282be1633bb4638f6f47e159299
tree302dea53e6baa7c26521de3da308ab77b3a5e034tree | snapshot
parentd4a48671bc453ead3cff911a0dfcc16ce5538072commit | diff
seccomp: also block shmat(..., SHM_EXEC) for MemoryDenyWriteExecute

shmat(..., SHM_EXEC) can be used to create writable and executable
memory, so let's block it when MemoryDenyWriteExecute is set.
man/systemd.exec.xml diff | blob | blame | history
src/core/execute.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.