lkml.org 
[lkml]   [2011]   [Aug]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [kernel-hardening] Re: [PATCH v3 -resend] move RLIMIT_NPROC check from set_user() to do_execve_common()
    Hi Linus,

    On Tue, Aug 09, 2011 at 12:16 +1000, NeilBrown wrote:
    > On Mon, 8 Aug 2011 19:02:04 +0400 Vasiliy Kulikov <segoon@openwall.com> wrote:
    >
    > > The patch http://lkml.org/lkml/2003/7/13/226 introduced an RLIMIT_NPROC
    > > check in set_user() to check for NPROC exceeding via setuid() and
    > > similar functions. Before the check there was a possibility to greatly
    > > exceed the allowed number of processes by an unprivileged user if the
    > > program relied on rlimit only. But the check created new security
    > > threat: many poorly written programs simply don't check setuid() return
    > > code and believe it cannot fail if executed with root privileges. So,
    > > the check is removed in this patch because of too often privilege
    > > escalations related to buggy programs.
    ...
    > > Reviewed-by: James Morris <jmorris@namei.org>
    > Acked-by: NeilBrown <neilb@suse.de>

    It got 2 positive feedbacks and seems nobody has better solution.
    Is it possible to see it in 3.1?

    Thanks!

    --
    Vasiliy Kulikov
    http://www.openwall.com - bringing security into open computing environments


    \
     
     \ /
      Last update: 2011-08-11 19:21    [W:0.022 / U:32.168 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site