lkml.org 
[lkml]   [1998]   [Nov]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: F_SETOWN...
Date
>                 case F_SETOWN:
> err = 0;
> filp->f_owner.pid = arg;
> filp->f_owner.uid = current->uid;
> filp->f_owner.euid = current->euid;
> if (S_ISSOCK (filp->f_dentry->d_inode->i_mode))
> err = sock_fcntl (filp, F_SETOWN, arg);
> break;
>
> Does no one else think that's just a little on the brain damaged side? No
> sanity checks what-so-ever in handing a filedesc to an arbitrary process
> number... no permissions check, no pid check, nothing.

Read a little further. In paticular read the send_sigio function and you'll
see the check is done at signal delivery time where it should be done,
otherwise you could set up a SIGIO on a process that then execs a setuid
process you shouldnt be able to signal




-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:45    [W:0.051 / U:0.976 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site