topic Re: Kernel Parameter executable_stack in Operating System - HP-UX

Kernel Parameter executable_stack

LeoThe13th — Thu, 09 Jul 2009 13:44:14 GMT

Curently all our application is running on Oracle 9i (9.2.0) and application is up and running.

As per the pre-requiste script for Oracle 10g we have to install HP
UX patched and set Kernel parameter executable_stack to 0.
List of Patches
PHNE_31097
PHSS_31221
PHSS_30970
PHSS_32508
PHSS_32509
PHSS_32510

I have installed all above patches and set kernel parameter toexecutable_stack to 0 but my application is still in Oracle 9i and my database is Oracle 9i.

My code is not executing anything on stack.

Thanks
Bhushan

Re: Kernel Parameter executable_stack

James R. Ferguson — Thu, 09 Jul 2009 13:50:50 GMT

Hi:

> My code is not executing anything on stack.

And with the kernel parameter set to 0 it won't be allowed to do so. This is the purpose; to defeat malicious, arbitrary "stack-smashing" or buffer overflow attacks.

Regards!

...JRF...

Re: Kernel Parameter executable_stack

Steven E. Protter — Thu, 09 Jul 2009 13:57:27 GMT

Shalom,

Oracle 9.2.0 has a number of pre-installation kernel parameters. These must be complied with prior to installation.

They and the Oracle recommended patch list are on http://metalink.oracle.com

I don't see an OS listed in your post, but the patch list looks a little short compared to what I installed to get that version working on HP-UX 11.11

SEP

Re: Kernel Parameter executable_stack

LeoThe13th — Thu, 09 Jul 2009 14:05:56 GMT

I want to say that...my C code is not using any kind of stack programing.

SO my question is
Above patches and Kernel parameter is set to 0 and my application on oracle 9i and HP UX 11.11 will work fine or not?

Re: Kernel Parameter executable_stack

James R. Ferguson — Thu, 09 Jul 2009 14:10:55 GMT

Hi (again):

> want to say that...my C code is not using any kind of stack programing.

You really mean that your code isn't attempting to exploit a buffer overflow.

> SO my question is
Above patches and Kernel parameter is set to 0 and my application on oracle 9i and HP UX 11.11 will work fine or not?

Yes. If you are truly concerned you could set the 'executable_stack' parameter to two (2) which will allow potentially malicious code to run but log events in the 'dmesg' buffer. This would be overkill in my opinion. Stay with the value of zero (0).

Regards!

...JRF...