On Montag, 12. Mai 2003 13:48, Peter Wiersig wrote:

mount options don't help when faced with scripts.

they don´t even help when faced with binaries: seife@mixi:~ > cp /bin/ps . seife@mixi:~ > chmod -x ps seife@mixi:~ > /lib/ld-linux.so.2 ./ps PID TTY TIME CMD 7847 pts/7 00:00:00 bash 7865 pts/7 00:00:00 ld-linux.so.2 seife@mixi:~ > ls -l ps -r--r--r-- 1 seife it 90496 2003-05-12 13:54 ps seife@mixi:~ > they are just useless for this. -- Stefan Seyfried "Never underestimate the bandwidth of a station wagon full of tapes hurtling down the highway" -- [Andrew S. Tanenbaum]

Hi folks, Andre ten Bohmer (WU) wrote:

Shell scripts are also blocked, perl scripts indeed run.

Did you try to run them via source? Or cating it into bash? I think the bottom line is that mounting noexec does not protect you from a dedicated hacker. But it may protect against stupid automated attacks and may buy you the time you need to dicover intrusion attempts. If you really want to control what kind of files can be executed you'll have to use tools like LIDS or RSBAC. baba, Tom -- this is a maillist account, so please send personal replies to cso[at]trium[dot]de