lkml.org 
[lkml]   [1996]   [Apr]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: As 2.0 looms
    Date
    > ftp://ftp.ists.pwr.wroc.pl/pub/msdos/telnet/ncsa_upe/tel23074.zip
    > (source is in v230704s.zip). I have tested it with 1.3.79 (with
    > path mtu discovery enabled - ncsa 2.3.08 didn't work) and it seems
    > to work. I don't know if anyone is working on this code - this
    > version is over a year old. Too bad - it's faster and often more
    > stable than these windoze telnets, and runs on almost anything...

    Thanks for that. I'll put it in the Documentation directory as
    a note about buggy NCSA stuff.

    > Now back to things to fix before 2.0:
    >
    > - /proc is still insecure :-(. You can open /proc/<pid>/mem and
    > hold the file descriptor, then have the target process exec some
    > setuid/setgid/unreadable program and read its memory at will.
    > Not good for things like ssh - the secret host key is there...

    Arghhh... Linus ????. We definitely need to break the association for
    setuid/setgid apps. It wouldnt actually be hard to do.

    > - somewhat related: it shouldn't be possible to ptrace unreadable
    > programs (just like set[ug]id), they may be unreadable for a reason
    > like encryption key compiled in, etc. Also, ld.so needs some way
    > to know the program is unreadable so it won't accept LD_xxx (this
    > may need kernel support, syscall to read the dumpable flag maybe?)

    There are millions of these, core dumping etc. Its basically I think a
    unix feature. At least we dont have compiled in passwords like GCOS3
    had.

    > - do we still have the verify_area/memcpy race? (I guess yes, but
    > I hope I am wrong... what if the area is unmapped while the process
    > sleeps between verify_area and memcpy?)

    You can get a non fatal Oops: out of that yes. The ftruncate disk corrupt
    bug is gone.

    > - bad_user_access_length should be available to modules for old gcc
    > users, in ksyms.c or perhaps as inline function conditional on the
    > version of gcc? (otherwise at least ncpfs won't load)

    Use gcc 2.7.x - 2.5.8 miscompiles stuff in the current kernel.

    Alan



    \
     
     \ /
      Last update: 2005-03-22 13:36    [W:0.021 / U:0.392 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site