Re[4]: Linux hardening

> What do you mean? Curl prints to STDOUT. If someone manages to exec a
> shell, couldn't he just redirect the curl output to /tmp as he desires?

> Anyway, it seems to me it'd be more effective to make sure he cannot
> execute whatever it is he downloaded; the noexec flag and GRSec's TPE
> would probably both be useful for that.

> Or did I misunderstand you?

You  misunderstood.  Method  above was meant to be used with
wget,  that  dumps  received  file  into  file. But it`s not
impossible  to  modify  curl`s  source to behave in the same
way:  force  it to redirect received data into file and then
apply the same hack.

Am I wrong?