Messages in this thread |  | | Date | Wed, 4 Sep 2002 14:11:18 -0700 (PDT) | From | "M.L.PrasannaK.R." <> | Subject | fsuid0 caps |
| |
In reply to ttp://www.uwsg.iu.edu/hypermail/linux/kernel/0204.3/0380.html
This is documentation error. There is also a break in default semantics of uid0 that needs to be fixed. It is not a security hole as it results in the reduced capabilities rather than in the increased capabilities.
setresuid(x,x,-1) clears effective caps. setfsuid(0) rstores CAP_FS_MASK effective caps. setresuid(-1,-1,x) clears both effective and permitted caps. Both fs and non fs caps are lost.
This results in uid0 with no capabilties and no way of restoring them. If this is valid issue, something like the following patch fixes it.
Thanks, MLPKR.
__________________________________________________ Do You Yahoo!? Yahoo! Finance - Get real-time stock quotes http://finance.yahoo.com[unhandled content-type:application/x-unknown] |  |