Messages in this thread | | | Date | Fri, 23 Apr 2004 09:46:21 +0200 | From | Peter Waechtler <> | Subject | Re: [PATCH] coredump - as root not only if euid switched |
| |
On Thursday, April 22, 2004, at 09:53PM, Chris Wright <chrisw@osdl.org> wrote:
>* Peter W�chtler (pwaechtler@mac.com) wrote: >> Am Do, 2004-04-22 um 11.56 schrieb Andrew Morton: >> > Peter Waechtler <pwaechtler@mac.com> wrote: >> > > >> > > >(why are you trying to unlink the old file anyway?) >> > > > >> > > >> > > For security measure :O >> > > I tried on solaris: touch the core file as user, open it and wait, dump core >> > > as root -> nope, couldn't read the damn core - it was unlinked and created! >> > >> > hm, OK. There's a window in which someone can come in and recreate the >> > file, but the open is using O_EXCL|O_CREATE so that seems safe enough. >> >> So here is the updated patch with an open coded call to sys_unlink > >This patch breaks various ptrace() checks. >
I guess the mm->dumpable flag was misused then as something like mm->switchUid. I can add this flag and make the ptrace paths use that.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |