[lkml]   [2003]   [Apr]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] new syscall: flink
    Once a process unlinks the last directory entry referencing a particular inode that it has an
    open fd for and then passes the open fd to some other process (regardless of exactly how it does that), it seems to me that it has conceded any interest in the previous security constraints associated with that inode or with the recently
    unlinked last directory entry for it. If the client process subsequently flink()s to the inode, it is merely a zerocopy file copy.

    Since the client owns the new directory entry, it can chmod the inode to have any permissions it wants, create or modify an ACL where ACLs are in use, modify a capabilities mask more fine-grained than traditional unix permissions if something like that is in use, etc.

    The cases with potential security implications are all in the context of flink()ing to an open fd for an inode that still corresponds to at least one directory entry.


    Clayton Weaver

    Sign-up for your own FREE Personalized E-mail at

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:34    [W:0.022 / U:10.420 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site