I'm still lurking here, but not sure what this suggestion means.
Please expand.
On 5/10/19 1:22 am, Jonathan Dowland wrote:
On Wed, Oct 02, 2019 at 07:03:59PM +1000, Keith Bainbridge wrote:
I wonder if having /home on a 'noexec' partition would stop this
attack, please?
I don't know specifically about this attack, but noexec is trivial to
circumvent. Here's three ways:
bash -c "~/whatever"
cp ~/whatever /tmp && /tmp/whatever
/lib64/ld-linux-x86-64.so.2 ~/whatever
--
Keith Bainbridge
keithrbaugro...@gmail.com
+61 (0)447 667 468
