New User, Welcome!     Login

Re: /proc filesystem allows bypassing directory permissions on Linux

From: psz maths usyd edu au
To: marco osp nl, pavel ucw cz
Cc: bugtraq securityfocus com, dan lightwave net ru, jim jtan com
Subject: Re: /proc filesystem allows bypassing directory permissions on Linux
Date: Fri - Oct 30, 2009 12:52 PM


> ... another solution -- allow fcntl() to remove read-only and
> append-only limitations, so that behaviour is at least explicit.

Do not lower security, just to emulate /proc sloppiness. (That would be
like fixing a root security bug by doing away with the root password.)
Is there anything (currently) relying on that security?

Paul Szabo   psz@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia




Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!