[Bug 1828936] Re: many KDE processes have rwx memory mappings

[Bug Watch Updater]

Launchpad has imported 1 comments from the remote bug at
https://bugzilla.redhat.com/show_bug.cgi?id=1710869.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2019-05-16T13:10:34+00:00 L.Bonnaud wrote:

Description of problem:

As a defense against machine code injection made possible by buffer
overflow bugs, most Linux distributions have worked over the years to
remove as many rwx memory mappings as possible in processes.

I checked this on several of my systems and unfortunately I found that
many KDE processes do have rwx memory mappings.

I chose to report this bug against the kded package because it is one of
the most fundamental affected KDE process I found. However, the problem
seems to be more general in KDE. I apologize in advance for not finding
a better software package to report this problem.

Version-Release number of selected component (if applicable):

Fedora 30 packages updated today.

How reproducible:

always

Steps to Reproduce:
1. Log in Plasma
2. Run the following command:

$ grep rwx /proc/$(pidof kded5)/maps

Actual results:

$ grep rwx /proc/$(pidof kded5)/maps
7f68d7c2a000-7f68d7c3a000 rwxp 00000000 00:00 0

Expected results:

No output

Additional info:

According to comments in this bug report:
  https://bugs.kde.org/show_bug.cgi?id=407496
other Linux distributions do not have the same problem.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/kded/+bug/1828936/comments/3


** Changed in: kded (Fedora)
       Status: Unknown => Confirmed

** Changed in: kded (Fedora)
   Importance: Unknown => Undecided

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kded in Ubuntu.
https://bugs.launchpad.net/bugs/1828936

Title:
  many KDE processes have rwx memory mappings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kded/+bug/1828936/+subscriptions