lkml.org 
[lkml]   [1996]   [May]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: As 2.0 looms
Date
> Nope, there is no window, because the read() actually checks the same 
> things that "ptrace" checks. Notably, in order to be able to read the
> process memory map, we must have the PF_PTRACED bit set, and then a suid
> execve wouldn't succeed anyway.

It depends when the read tests, we could start the read have PF_TRACED turn off
and then exec a setuid program. If the read tests per byte we should be ok.

> In short, the new read really _should_ be secure. Knock wood.

Hope so.

Alan



\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.055 / U:1.960 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site