Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

[David S. Miller]

   From: [e-mail] (Alan Cox)
   Date: Tue, 4 Aug 1998 21:55:20 +0100 (BST)

   > exec patch just makes the stack smashing attacks harder (you need
   > to make use of code present somewhere else, but it's still
   > doable), not impossible.

   99% of attackers are too stupid to write attack programs, 99% of
   attack programs aren't written to cope with the stack protection
   patch

So the argument goes that the people capable of coding exploits can
now just write one which deals with the stack execute protection cases
too, then what do you do?

Later,
David S. Miller
[e-mail]