Re: selinux: should execmem disable shmat(..., SHM_EXEC)?

2016-10-27 Thread Stephen Smalley
On 10/26/2016 04:31 PM, Topi Miettinen wrote: > Hi, > > Maybe this is a stupid question and I didn't test this with SELinux, but > it looks to me that SELinux execmem does not prevent process from > getting writable and executable memory mappings by using shmat(..., > SHM_EXEC). Shouldn't this be

selinux: should execmem disable shmat(..., SHM_EXEC)?

2016-10-26 Thread Topi Miettinen
Hi, Maybe this is a stupid question and I didn't test this with SELinux, but it looks to me that SELinux execmem does not prevent process from getting writable and executable memory mappings by using shmat(..., SHM_EXEC). Shouldn't this be blocked by execmem, I suppose it is there to prevent this