Re: Hardening CentOS by removing "hacker" tools

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Erek Dyskant wrote:
> 
> > Not if /home and /tmp and /var/tmp are mounted with noexec,nodev,nosuid,...
> 
> Actually, wrong.
> 
>  /lib/ld-2.5.so ~/bin/wget 

Actually, wrong:

[angenenr@shutdown ~]$bin/true ; echo $?
0
[angenenr@shutdown ~]$/lib64/ld-2.5.so bin/true; echo $?
0
[angenenr@shutdown ~]$sudo mount -o remount,noexec /home
[angenenr@shutdown ~]$bin/true ; echo $?
-bash: bin/true: Permission denied
126
[angenenr@shutdown ~]$/lib64/ld-2.5.so bin/true; echo $?
bin/true: error while loading shared libraries: bin/true: failed to map
segment from shared object: Operation not permitted
127
[angenenr@shutdown ~]$

Ralph

Attachment: pgpTG3qBZJvpz.pgp
Description: PGP signature

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux