lkml.org 
[lkml]   [1998]   [Aug]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

    What if a root process wants to put a suid program at the end of a
    shell pipeline for example? This changes core unix semantics, and is
    a bandaid at best.

    Another issue, what's going to propagate to users who care more
    quickly, this kernel fix or updates of the packages fixed?

    We had an issue like this last year, where someone tried to kill
    security exploits by putting a monkey wrench into the kernel
    (I'm refereing to the non-executable stack patches). That change
    didn't go in, and we're still alive today.

    At best this should be a non-official patch for people who want piece
    of mind until the linux security audit team takes care of all the
    userland bits which can be hit by this bug, not a part of the official
    tree.

    Later,
    David S. Miller
    davem@dm.cobaltmicro.com

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

    \
     
     \ /
      Last update: 2005-03-22 13:43    [W:0.021 / U:60.344 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site