Re:Rga: Ripgrep, but also search in PDFs, E-Books, Office do...
by westurner on Tuesday September 17, 2024 @09:31PM
(#41574793)
Couldn't or shouldn't each parser be run in a container with systemd-nspawn or LXC or another container runtime? (Even if all it's doing is reading a file format into process space as NX data not code as the current user)
[ Parent
| on HN ]
Re:Rga: Ripgrep, but also search in PDFs, E-Books, Office do...
by westurner on Wednesday September 18, 2024 @03:32AM
(#41576846)
NX bit:
https://en.wikipedia.org/wiki/NX_bit
Executable-space protection > Limitations mentions JITs and ROP: https://en.wikipedia.org/wiki/Executable-space_protection
mprotect(), VirtualAlloc[Ex] and VirtualProtect[Ex],
"NX bit: does it protect the stack?" https://security.stackexchange.com/questions/47807/nx-bit-do...