New User, Welcome!     Login

Re: /proc filesystem allows bypassing directory permissions on Linux

From: Dan Yefimov <dan lightwave net ru>
To: psz maths usyd edu au
Cc: Pavel Machek <pavel ucw cz>, bugtraq securityfocus com
Subject: Re: /proc filesystem allows bypassing directory permissions on Linux
Date: Mon - Oct 26, 2009 03:17 AM


On 25.10.2009 2:40, psz@maths.usyd.edu.au wrote:
> Dear Pavel,
>
>> ... that's exactly the problem.
>
> I see, the /proc/*/fd/* objects seem "confused": are they symlinks,
> hardlinks, or open file descriptors? I guess should always act as
> the latter, where access mode flags (O_RDONLY or O_RDWR) are set at
> open() and not changeable afterwards in fcntl(). Any open() on them
> should behave as a dup().
>
Paul, in authentic kernels /proc/<PID>/fd/<FD> are symlinks, not anything other. 
There're no such publicly accessible file objects, as file descriptors, there're 
only files (including special ones), directories and symlinks. But the above 
words don't necessary relate to patched kernels like distributed by third parties.
-- 

Sincerely Your, Dan.




Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!