Messages in this thread | | | Subject | Re: ptrace and setuid problem | From | Andreas Schwab <> | Date | Sun, 06 Mar 2005 13:13:09 +0100 |
| |
Tom Horsley <tomhorsley@adelphia.net> writes:
> If I exec a setuid program under ptrace, I can read the image via > PEEKDATA requests.
Only CAP_SYS_PTRACE capable processes get suid/sgid semantics under ptrace, or can attach to a privileged processes.
Andreas.
-- Andreas Schwab, SuSE Labs, schwab@suse.de SuSE Linux Products GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany Key fingerprint = 58CA 54C7 6D53 942B 1756 01D3 44D5 214B 8276 4ED5 "And now for something completely different." - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |