Messages in this thread |  | | Subject | Re: Local root exploit with kmod and modutils > 2.1.121 | Date | Thu, 16 Nov 2000 21:45:15 +0000 (GMT) | From | Alan Cox <> |
| |
> >Then dev_load is being called the wrong way. In older kernels we explicitly > >only did a dev_load with user passed names providing suser() was true. > > ping6 -I module_name. ping6 is setuid, it passes the interface name to > the kernel while it holds root privileges, suser() == true. It is > not reasonable to expect setuid programs to know that Linux does > something special with some parameters when no other O/S has that > "feature".
ping6 shouldnt be running with CAP_SYS_MODULE in the first place
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org Please read the FAQ at http://www.tux.org/lkml/
|  |