[RFC PATCH v1 0/5] Add support for O_MAYEXEC

Florian Weimer fweimer at redhat.com
Wed Dec 12 20:13:16 UTC 2018

* James Morris:

> If you're depending on the script interpreter to flag that the user may 
> execute code, this seems to be equivalent in security terms to depending 
> on the user.  e.g. what if the user uses ptrace and clears O_MAYEXEC?

The argument I've heard is this: Using ptrace (and adding the +x
attribute) are auditable events.


More information about the Linux-security-module-archive mailing list