[lkml]   [2001]   [Oct]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Overriding qouta limits in Linux kernel

> has a CAP_SYS_RESOURCE capability then it can override the limits (that's
> how I understand this capability). Hence it's got right to exceed user quota.
> I think this is reasonable behaviour (root can do anything - suid binaries are
> just making the will of root ;)).
> And BTW I know about no way how to know who opened the file...

It is ok if suid binaries do what they are privileged to. But it is not ok
if unprivileged users do what they want using privileges of those suid

Controling qouta is not a user-space task. Kernel should perform some
additional checks before allowing suid binary to write to file descriptor
that is inherited from unprivileged user process.

Good solution is to check CAP_SYS_RESOURCE process's capability when the
file descriptor is opened (just like CAP_DAC_OVERRIDE and
others are checked).

Wojciech Purczyński | Security Officer |
Murphy's law says that there is always one more bug...
...but he forgot to mention whether it is exploitable.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:11    [W:0.226 / U:0.076 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site