lkml.org 
[lkml]   [2005]   [Sep]   [18]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
FromFlorian Weimer <>
SubjectCAN-2001-1551
DateSun, 18 Sep 2005 11:12:37 +0200
Has this issue been fixed?  Or is this not a kernel bug?

| From: Wojciech Purczyñski (wpsupermedia.pl)
| Date: Mon Oct 22 2001 - 03:43:13 CDT
| 
| Almost any suid binary may be used to create large files overriding quota
| limits.
| 
| When setuid-root binary inherits file descriptors from user process it may
| write to it without respecting the quota restrictions. This is because
| suid process has CAP_SYS_RESOURCE effective capability enabled during
| writing to the file. Quota does not know anything about who opened file
| descriptor and checks current process privileges only. This is bug in
| kernel and not in those setuid-root binaries. 

<http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-09-18 11:15    [from the cache]
©2003-2008