diff options
author | Al Viro <viro@zeniv.linux.org.uk> | 2011-03-23 15:52:50 -0400 |
---|---|---|
committer | Al Viro <viro@zeniv.linux.org.uk> | 2011-03-23 17:01:18 -0400 |
commit | a9712bc12c40c172e393f85a9b2ba8db4bf59509 (patch) | |
tree | c40217e028ae937da7ad94e249e2247191ffcc8f /CREDITS | |
parent | 198214a7ee50375fa71a65e518341980cfd4b2f0 (diff) |
deal with races in /proc/*/{syscall,stack,personality}
All of those are rw-r--r-- and all are broken for suid - if you open
a file before the target does suid-root exec, you'll be still able
to access it. For personality it's not a big deal, but for syscall
and stack it's a real problem.
Fix: check that task is tracable for you at the time of read().
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'CREDITS')
0 files changed, 0 insertions, 0 deletions