Messages in this thread | | | Subject | Re: compute_creds fixup in -mm | From | Stephen Smalley <> | Date | Wed, 21 Apr 2004 16:10:12 -0400 |
| |
On Wed, 2004-04-21 at 15:37, Andy Lutomirski wrote: > I was worried about sid changing but uid and caps staying the same if > a ptrace_detach or _exit happens between the cap_bprm_apply_creds call > and the rest of selinux_bprm_apply_creds. Remember the sendmail bug -- > program failure due to lack of capabilities can cause privilege leaks > (in this case selinux sid leaks).
That particular issue shouldn't be a problem, as SELinux security transitions aren't controlled by Linux capabilities and SELinux specifically controls code execution (both entry into a domain and ability to execute anything else without changing domains). However, I do agree that it could yield an unexpected failure in the program that would be harmful, so I'm in favor of checking the state only once.
-- Stephen Smalley <sds@epoch.ncsc.mil> National Security Agency
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |