Messages in this thread | | | Date | Fri, 9 Jun 2006 12:01:42 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: [PATCH][RFC] Let even non-dumpable tasks access /proc/self/fd |
| |
Quoting Petr Baudis (pasky@suse.cz): > This kernel patch fixes the problem by letting the process access its > own /proc/self/fd - as far as I can see, this should be reasonably safe > since for the process, this does not reveal "anything new". Feel free to > comment on this.
Given that
fd=open("/etc/shadow", "r"); setuid(1000); read(fd, buf, 100);
is possible before this patch, I agree - nothing new is revealed with this patch :)
(I've been waiting to respond because it does make me nervous, but it seems clear that is unwarranted)
thanks, -serge - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |