[lkml]   [2004]   [Aug]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    Subjectdynamic /dev security hole?
    Suppose I have access to a device, for whatever legit
    reason. Maybe I'm given access to a USB key with
    some particular serial number.

    I hard link this to somewhere else. Never mind that an
    admin could in theory use 42 separate partitions and
    mount most of the system with the "nodev" option. This
    is rarely done.

    Now the device is removed. The /dev entry goes away.
    A new device is added, and it gets the same device
    number as the device I had legit access to. Hmmm?

    I should mention open file descriptors too, though I
    think the transition away from doing dev_t lookups in
    the read()/write()/etc. code has taken care of that.

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 14:05    [W:0.017 / U:9.908 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site