diff options
| author | Kees Cook <keescook@chromium.org> | 2017-07-19 00:25:35 +0200 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2017-08-01 21:03:14 +0200 |
| commit | 64701dee4178eb4a771b8b36cd86560f5b0e2460 (patch) | |
| tree | 1a0012699f1c5ba4fb7909eb0db75aaf10168e7a /arch | |
| parent | exec: Consolidate dumpability logic (diff) | |
| download | linux-64701dee4178eb4a771b8b36cd86560f5b0e2460.tar.xz linux-64701dee4178eb4a771b8b36cd86560f5b0e2460.zip | |
exec: Use sane stack rlimit under secureexec
For a secureexec, before memory layout selection has happened, reset the
stack rlimit to something sane to avoid the caller having control over
the resulting layouts.
$ ulimit -s
8192
$ ulimit -s unlimited
$ /bin/sh -c 'ulimit -s'
unlimited
$ sudo /bin/sh -c 'ulimit -s'
8192
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions