lkml.org 
[lkml]   [2004]   [Aug]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: dynamic /dev security hole?
From
Date
On Llu, 2004-08-09 at 05:40, Eric Lammerts wrote:
> Just an idea for a fix for this problem: If udev would change the
> permissions to 000 and ownership to root.root just before it unlinks
> the device node, the copy would become useless.

Unfortunately not the whole story. The permissions are checked at open
time not on read/write/ioctl so once I have the device opened you
lose. That means you may have to fix the permissions and ownership
before trying to unload the device. The unload will fail if it is still
busy but if not then nobody will be able to open the dev node and
whatever file it now points to.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:05    [W:0.574 / U:0.024 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site