lkml.org 
[lkml]   [1999]   [Jul]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [security]: kernel ioctl()'s [3]


    On Fri, 2 Jul 1999, Chris Evans wrote:

    > Because programs running as root assume
    >
    > open("blah", O_RDWR)
    > write(blah)
    >
    > will work.

    Take a program running as root. Take a CD. Mount it. root is *not*
    guaranteed to have everything writable.

    > They do NOT expect to have to
    >
    > open("blah", O_RDWR)
    > if (-EPERM)
    > chflags("blah", immutable off)
    > open("blah", O_RDWR)

    Indeed. Case when it would matter, please? Notice that all derivatives of
    4.4BSD have independent system and user flags. If you can find security
    problems with that - share, I would like to look at the reaction of Theo ;-)


    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:52    [W:0.019 / U:0.252 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site