[Bug 1828936] [NEW] many KDE processes have rwx memory mappings

[Laurent Bonnaud]

Public bug reported:

SUMMARY

As a defense against machine code injection against buffer overflow
bugs, most Linux distributions have worked over the years to remove as
many rwx memory mappings as possible in processes.

I checked this on several of my systems and unfortunately I found that
many KDE processes do have rwx memory mappings.

I chose to report this bug against the kded package because it is one of
the most fundamental affected KDE process I found.  However, the problem
seems to be more general in KDE.  I apologize in advance for not finding
a better software package to report this problem.


STEPS TO REPRODUCE
1. Log in Plasma
2. Run the following command:

$ grep rwx /proc/$(pidof kded5)/maps

OBSERVED RESULT

$ grep rwx /proc/$(pidof kded5)/maps
7f68d7c2a000-7f68d7c3a000 rwxp 00000000 00:00 0 

EXPECTED RESULT

No output

ProblemType: Bug
DistroRelease: Ubuntu 19.04
Package: kded5 5.56.0-0ubuntu1
Uname: Linux 5.1.1-050101-generic x86_64
ApportVersion: 2.20.10-0ubuntu27
Architecture: amd64
CurrentDesktop: KDE
Date: Tue May 14 08:41:00 2019
SourcePackage: kded
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: kded (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug disco

** Bug watch added: KDE Bug Tracking System #407496
   https://bugs.kde.org/show_bug.cgi?id=407496

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kded in Ubuntu.
https://bugs.launchpad.net/bugs/1828936

Title:
  many KDE processes have rwx memory mappings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kded/+bug/1828936/+subscriptions