[SOLVED] MFD_EXEC or MFD_NOEXEC_SEAL set???......

reddog83 · 01-24-2024, 11:02 PM

Quote:

(Program-Name)[PID]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set

I am starting to see this show up in my logs and have been for atleast i think about a month. I have never seen this before..

allend · 01-25-2024, 02:35 AM

Apparently a new kernel feature since the 6.3+ kernel.
To quote Kees Cook

Quote:

This is pretty standard for getting new options like this noticed by
userspace -- there is no regression in _behavior_. It's just a reminder
to fix userspace code.

It is happening e.g. QEMU

jayjwa · 01-25-2024, 01:04 PM

Happens on startup with Apache too.

Code:

httpd[1520]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set

reddog83 · 01-25-2024, 01:09 PM

Quote:

Originally Posted by jayjwa

Happens on startup with Apache too.

Code:

httpd[1520]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set

Thats what im seeing as well…

reddog83 · 01-25-2024, 01:16 PM

I guess all these years i never really paid that close of attention. Old age must be getting to me.