Skip to content

Executability check (Linux >= 6.13) #1431

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
2 tasks
rusty-snake opened this issue Apr 4, 2025 · 0 comments
Open
2 tasks

Executability check (Linux >= 6.13) #1431

rusty-snake opened this issue Apr 4, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@rusty-snake
Copy link
Contributor

rusty-snake commented Apr 4, 2025 •
edited
Loading

https://docs.kernel.org/next/userspace-api/check_exec.html

  • AT_EXECVE_CHECK
    • for execveat which is rustix_1_0_5::not_implemented::quite_yet ATM. However we do not need to wait for it, we can just add it to AtFlags.
  • SECBIT_EXEC_RESTRICT_FILE and SECBIT_EXEC_DENY_INTERACTIVE (+ _LOCKED variants)
    • add to CapabilitiesSecureBits

Oblivious it depends on linux_raw_sys and libc support for those flags.
@sunfishcode sunfishcode added the enhancement New feature or request label Apr 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@sunfishcode @rusty-snake