logoalt Hacker News

asdfsa32yesterday at 9:18 AM2 repliesview on HN

Sure, but it still means that the OS has to decide who is allowed to do it and to what extent. Sophisticated worms like Stuxnet would be much harder with strict W^X for example, since CVE-2010-2568 and the like would be much harder to execute.


Replies

orfyesterday at 9:39 AM

> Sure, but it still means that the OS has to decide who is allowed to do it and to what extent

It has to do that anyway?

show 1 reply
pjmlpyesterday at 9:39 AM

Signed binaries with the proper assigned OS capabilities.

show 1 reply