lkml.org 
[lkml]   [1996]   [Mar]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Kill system call
timw@sequent.com (Tim Wright)  wrote on 22.03.96 in <4057.827546734@crg8.sequent.com>:

> Posix(1990) states:
> "For a process to have permission to send a signal to a process designated
> by pid, the real or effective user ID of the sending process must match the
> real or effective user ID of the receiving process, unless the sending
> process has appropriate privileges. If {_POSIX_SAVED_IDS} is defined, the
> saved set-user-ID of the receiving process shall be checked in place of its
> effective user ID."

ISTR this was changed because of a security hole. I'm not so clear if it's
the right way to fix it.

Anyway, the hole I remember is as follows:

System daemon switches identity to user to do something.
User can now send all sorts of signals to daemon.


MfG Kai


\
 
 \ /
  Last update: 2005-03-22 13:36    [W:0.050 / U:0.168 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site