lkml.org 
[lkml]   [1997]   [Aug]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectBugs in sysctl.c

Hi,

It seems that securelevel is completely shafted. For a start, the
permissions that /proc/sys/kernel/securelevel are registered with are
incorrect (0444, should be 0644 to allow root write access) Trivial patch
=> not included here :-)

Furthermore, and more worrying, it seems that do_securelevel_strategy is
NOT called upon modification of securelevel. This means that root can
arbitrarily lower the securelevel value(!).

I did not have time to look into this.. I will probably do so tonight
unless some bright spark posts fixes/causes before then, hint hint ;-)

Cheers,
Chris


\
 
 \ /
  Last update: 2005-03-22 13:40    [W:0.134 / U:0.376 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site