Messages in this thread | | | Date | Wed, 3 Oct 2012 21:49:29 +0100 | From | Alan Cox <> | Subject | Re: Linux 3.6 |
| |
On Wed, 3 Oct 2012 13:05:15 -0700 Kees Cook <kees@outflux.net> wrote:
> Hi Nick, > > 3.6 introduced link restrictions: > http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=800179c9b8a1e796e441674776d11cd4c05d61d7 > > It sounds like you've got symlinks in a world-writable directory, and > you're following those symlinks across mis-matched uids. You can either > have the symlinks be owned by the directory owner, or you can turn off > symlink restrictions in sysctl: > > # echo 0 > /proc/sys/fs/protected_symlinks
Quite honestly that should be pushed for 3.6.1 as a default - ASAP.
Alan
| |