![]() | |||||||||||||
Messages in this thread |
On Thursday, April 22, 2004, at 09:53PM, Chris Wright <chrisw@osdl.org> wrote: >* Peter W�chtler (pwaechtler@mac.com) wrote: >> Am Do, 2004-04-22 um 11.56 schrieb Andrew Morton: >> > Peter Waechtler <pwaechtler@mac.com> wrote: >> > > >> > > >(why are you trying to unlink the old file anyway?) >> > > > >> > > >> > > For security measure :O >> > > I tried on solaris: touch the core file as user, open it and wait, dump core >> > > as root -> nope, couldn't read the damn core - it was unlinked and created! >> > >> > hm, OK. There's a window in which someone can come in and recreate the >> > file, but the open is using O_EXCL|O_CREATE so that seems safe enough. >> >> So here is the updated patch with an open coded call to sys_unlink > >This patch breaks various ptrace() checks. > I guess the mm->dumpable flag was misused then as something like mm->switchUid. I can add this flag and make the ptrace paths use that. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-03-22 13:02 [from the cache] ©2003-2008 | |||||||||||||