lkml.org 
[lkml]   [2004]   [Aug]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: dynamic /dev security hole?

On Mon, 9 Aug 2004, Alan Cox wrote:
> On Llu, 2004-08-09 at 05:40, Eric Lammerts wrote:
> > Just an idea for a fix for this problem: If udev would change the
> > permissions to 000 and ownership to root.root just before it unlinks
> > the device node, the copy would become useless.
>
> Unfortunately not the whole story. The permissions are checked at open
> time not on read/write/ioctl so once I have the device opened you
> lose.

It's only meant as a fix for the hardlink trick, not against the open
file descriptor trick. About the latter, if someone still has the
device opened, how can it go away? And if it doesn't go away, how can
udev create a new node with the same major/minor?

Eric
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:05    [W:0.065 / U:2.276 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site