[lkml]   [2009]   [Oct]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: SECURITY PROBLEM: filesystem permiossion bypass on FD already opened
    NiTRo  wrote:
    > Just discovered this security problem [...]
    >If a FD is opened on a allowed file and then the permission is changed
    >the file is still redeable starting from the already read position to
    >the EOF.

    This is not a security problem; this is Unix working as designed.
    That's how file descriptors work. File permissions are checked when
    the file is opened, not on every read/write to the file descriptor.
    That's a pretty fundamental aspect of how Unix works, and it is
    well-documented and well-understood.

    On the other hand, the /proc attack that Pavel explains *is* a
    security problem. But that's different.

     \ /
      Last update: 2009-10-24 00:59    [W:0.020 / U:57.948 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site