lkml.org 
[lkml]   [2009]   [Dec]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: RFC: disablenetwork facility. (v4)
    > > Execute != read. The executable file may contain secrets which must not
    > > be available to the user running the setuid program. If you fail the
    > > setuid, the user will be able to ptrace() and then the secret is
    > > revealed.
    > >
    > > It's amazing how many security holes appear from what seems like a very
    > > simple request.
    >
    > Do we have a security hole in nosuid mount option?
    > Can someone write a patch to fix it?

    If a setuid app can read a key when its erroneously not set setuid then
    the user can read it too.

    Anything you can do with ptrace you can do yourself !


    \
     
     \ /
      Last update: 2009-12-29 22:13    [W:2.255 / U:0.240 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site