Messages in this thread | | | Date | Tue, 29 Dec 2009 21:11:39 +0000 | From | Alan Cox <> | Subject | Re: RFC: disablenetwork facility. (v4) |
| |
> > Execute != read. The executable file may contain secrets which must not > > be available to the user running the setuid program. If you fail the > > setuid, the user will be able to ptrace() and then the secret is > > revealed. > > > > It's amazing how many security holes appear from what seems like a very > > simple request. > > Do we have a security hole in nosuid mount option? > Can someone write a patch to fix it?
If a setuid app can read a key when its erroneously not set setuid then the user can read it too.
Anything you can do with ptrace you can do yourself !
| |