Messages in this thread | | | Date | Thu, 16 Mar 2000 19:18:03 +1100 | From | Richard Gooch <> | Subject | Security exploit in shmfs? |
| |
Hi, all. It looks like there is a potential security hole in the new shmfs code. In ipc/shm.c:sys_shmat() the root directory is temporarily changed for a while. A CLONE_FS clone can then come in and take advantage of this exposure. This needs to be fixed. This is in 2.3.99-pre2.
Frankly, I'd rather see the old SysV IPC code restored, especially since we're so close to 2.4. At least it's a known quantity.
Regards,
Richard.... Permanent: rgooch@atnf.csiro.au Current: rgooch@ras.ucalgary.ca
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |