lkml.org 
[lkml]   [1997]   [Jun]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: 2.1.43 curious pipe-entries in / (root)
From
Date
alan@lxorguk.ukuu.org.uk (Alan Cox) writes:
>
> This is all well and good but has anyone considered the security implications
> and verified people cannot rm , open, or otherwise poke around with these
> pipes ?

Well, it wasn't my idea. ;)

The comment included in the new code states:

/* I hope this does not introduce security problems.
* Please check and give me response.
*/

However, the pipes are created with permissions 600 and with the
"current->fsuid" and "current->fsgid" ownerships.

> Also what if / is read only

AFAIK, the pipes are inserted directly into the "dcache", so the
actual read/write status of the root directory shouldn't make a
difference.

Kevin <buhr@stat.wisc.edu>

\
 
 \ /
  Last update: 2005-03-22 13:39    [W:0.049 / U:0.036 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site