diff options
| author | Al Viro <viro@zeniv.linux.org.uk> | 2011-03-23 15:52:50 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2011-11-07 12:32:46 -0800 |
| commit | cdb19fb1cc7c1854d5698e43139f7920bcab274a (patch) | |
| tree | dbd9df1968b3b1fbee46d581c44b6f7a4ed421f1 /include | |
| parent | 6719bac67645ca27b2e74726387705b589a89a24 (diff) | |
| download | lwn-cdb19fb1cc7c1854d5698e43139f7920bcab274a.tar.gz lwn-cdb19fb1cc7c1854d5698e43139f7920bcab274a.zip | |
deal with races in /proc/*/{syscall,stack,personality}
commit a9712bc12c40c172e393f85a9b2ba8db4bf59509 upstream.
All of those are rw-r--r-- and all are broken for suid - if you open
a file before the target does suid-root exec, you'll be still able
to access it. For personality it's not a big deal, but for syscall
and stack it's a real problem.
Fix: check that task is tracable for you at the time of read().
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions