>Which does the PT_SUNWSTACK header apply to?

It sets the fields in the proc structure which defines the stack 
protection.

>I'm not sure what point there would be in per-thread
>control; if any one thread in an address space is exploitable,
>the whole address space is potentially corruptible.


It's different because mprotect() works on the process.  Using mprotect 
requires you to run mprotect on all process stacks (as long as they are 
created by the library).  I'm not sure that the kernel has sufficient 
information to figure that out.

Casper

_______________________________________________
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org

Reply via email to