Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Pavel Machek <pavel@xxxxxx>
- Date: Thu, 29 Oct 2009 12:00:27 +0100
Hi!
Not that I would have expected anything different considering who postedThus Debian kernel team should be blamed for that misbehaviour. Don't worry,
it in the first place.
hardlinks behave just the same way, as you describe. Use authentic Linux
kernels, if you dislike that.
Just tested it on my colo where the provider is using some homebrew
derived from the upstream Linux kernel. In any case Pavel was most
likely using Suse and I asked someone to give it a go on one of all
Ubuntu varieties. So even if it is not present upstream it is in a patch
which more than one distro has adopted (f.e. ptrace fixes).
Pavel was using pretty much vanilla kernel. (That is, patches in
drivers but nothing more significant.
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
- References:
- /proc filesystem allows bypassing directory permissions on Linux
- From: Pavel Machek
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Dan Yefimov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Anton Ivanov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Dan Yefimov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Anton Ivanov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Dan Yefimov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Anton Ivanov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Dan Yefimov
- Re: /proc filesystem allows bypassing directory permissions on Linux
- From: Anton Ivanov
- /proc filesystem allows bypassing directory permissions on Linux
- Prev by Date: ZDI-09-074: Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability
- Next by Date: Re: /proc filesystem allows bypassing directory permissions on Linux
- Previous by thread: Re: /proc filesystem allows bypassing directory permissions on Linux
- Next by thread: Re: /proc filesystem allows bypassing directory permissions on Linux
- Index(es):
Relevant Pages
|