diff options
| author | Alan Cox <alan@lxorguk.ukuu.org.uk> | 2007-04-17 23:59:01 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2007-05-01 17:05:59 -0700 |
| commit | 12b1ca6601c0ff4bc4fe44f8d631cd3eeaf18c88 (patch) | |
| tree | 1ad86cbfc15f6eb3a5d5e2d0bc50ba3fd57b2665 /fs/nfsd | |
| parent | a9c01941701641d505c07e7364a03447c694f6e8 (diff) | |
exec.c: fix coredump to pipe problem and obscure "security hole"
exec.c: fix coredump to pipe problem and obscure "security hole"
The patch checks for "|" in the pattern not the output and doesn't nail a
pid on to a piped name (as it is a program name not a file)
Also fixes a very very obscure security corner case. If you happen to have
decided on a core pattern that starts with the program name then the user
can run a program called "|myevilhack" as it stands. I doubt anyone does
this.
Signed-off-by: Alan Cox <alan@redhat.com>
Confirmed-by: Christopher S. Aker <caker@theshore.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'fs/nfsd')
0 files changed, 0 insertions, 0 deletions