From: Andreas Gietl <Listen@e-admin.de>
To: Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Cc: bernhard.kaindl@gmx.de
Subject: Re: [PATCH][2.4+ptrace] fix side effects of the kmod/ptrace secfix
Date: Fri, 25 Apr 2003 00:37:45 +0200 [thread overview]
Message-ID: <200304250037.45133.Listen@e-admin.de> (raw)
> You would need to restrict cmdline access to all root processes(not only
> suid) and maybe even to all processes with different capabilites and >
uid/gid
> to work around problems in such processes. But you would break even more
> system monitoring stuff this way(I've even heard shutdown is affected)
i can confirm that shutdown (halt|reboot) does not work on my 2.4.21-rc1-ac1
boxes. (gentoo + redhat).
But your patch does not seem to fix it.
--
e-admin internet gmbh
Andreas Gietl tel +49 941 3810884
Ludwig-Thoma-Strasse 35 fax +49 89 244329104
93051 Regensburg mobil +49 171 6070008
PGP/GPG-Key unter http://www.e-admin.de/gpg.html
next reply other threads:[~2003-04-24 22:25 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-04-24 22:37 Andreas Gietl [this message]
2003-04-25 10:40 ` [PATCH][2.4-rc1] fix side effects of the kmod/ptrace secfix Bernhard Kaindl
2003-04-25 14:40 ` Andreas Gietl
2003-04-25 14:30 ` Bernhard Kaindl
2003-04-26 16:58 ` Andreas Gietl
-- strict thread matches above, loose matches on Subject: below --
2003-04-17 5:46 2.4+ptrace exploit fix breaks root's ability to strace Yusuf Wilajati Purna
2003-04-19 5:57 ` Bernhard Kaindl
2003-04-22 5:03 ` Yusuf Wilajati Purna
2003-04-22 22:30 ` [PATCH][2.4+ptrace] fix side effects of the kmod/ptrace secfix Bernhard Kaindl
2003-04-24 5:40 ` Nuno Silva
2003-04-24 9:00 ` Arjan van de Ven
2003-04-24 11:26 ` Bernhard Kaindl
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200304250037.45133.Listen@e-admin.de \
--to=listen@e-admin.de \
--cc=bernhard.kaindl@gmx.de \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.