lkml.org 
[lkml]   [2004]   [May]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: 2.6.6-mm1
> +hugetlb_shm_group-sysctl-patch.patch
>
> Add /proc/sys/vm/hugetlb_shm_group: this holds the group ID of users who may
> allocate hugetlb shm segments without CAP_IPC_LOCK. For Oracle.
>
> +mlock_group-sysctl.patch
>
> /proc/sys/vm/mlock_group: group ID of users who can do mlock() without
> CAP_IPC_LOCK. Not sure that we need this.

These two just introduced a subtile behaviour change during stable series,
possibly (not likely) leading to DoS opportunities from applications running
as gid 0. Really, with capabilities first and now selinux we have moved
away from treating uid 0 special, so introducing special casing of a gid
now is more than just braindead.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:03    [W:0.156 / U:0.524 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site