Messages in this thread | | | Date | Wed, 13 Jan 1999 12:31:02 -0500 | From | Raul Miller <> | Subject | Re: odd chown difference between 2.0 and 2.1pre kernels |
| |
On Tue, 12 Jan 1999, Raul Miller wrote: > > > > Race condition if you can figure out what root is doing -- just setuid > > > > between time root examines files and chown.
David C Niemi <niemi@tux.org> wrote: > That race condition still exists in Linux 2.0.x. So if you are vulnerable > to this attack in 2.2 you are also vulnerable in 2.0.x, it just may be a > little harder to exploit.
How so?
Under 2.0, chown root cleared setuid.
-- Raul
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |