Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

[Martin Mares]

> Security patches aren't intended to fix bugs in software. They are a
> recogntion of the fact that nobody has mastered the art of writing highly
> secure software. 

   Yes, but ... doesn't this look like security through obscurity? The no stack
exec patch just makes the stack smashing attacks harder (you need to make use
of code present somewhere else, but it's still doable), not impossible.

				Have a nice fortnight
-- 
Martin `MJ' Mares   <[e-mail]>   http://atrey.karlin.mff.cuni.cz/~mj/
Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth
"The world is coming to an end...  SAVE YOUR BUFFERS!!"