Messages in this thread | | | Date | Thu, 6 Jun 2013 21:21:31 -0700 | From | Greg Kroah-Hartman <> | Subject | Re: [RFC PATCH v1 4/4] firmware loader: don't allow to request firmware via relative path |
| |
On Fri, Jun 07, 2013 at 09:30:09AM +0800, Ming Lei wrote: > On Fri, Jun 7, 2013 at 3:48 AM, Greg Kroah-Hartman > <gregkh@linuxfoundation.org> wrote: > > On Thu, Jun 06, 2013 at 08:01:50PM +0800, Ming Lei wrote: > >> It isn't a good pratice to request firmware via relative path, also > >> might have security issue, so don't do it. > > > > What would the security issue be? You are letting the person who build > > the kernel specify this, so they can put whatever they want in here, a > > '..' isn't going to keep them from being able to do "bad" things if they > > really want to. > > In VM case, guest kernel might access host filesystem files via this trick, > but not sure if it is possible.
How can a ".." do anything with guest kernels that total control over a path not do?
thanks,
greg k-h
| |