From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from out1-smtp.messagingengine.com ([66.111.4.25]:57518 "EHLO out1-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1030947AbbD1UF1 (ORCPT ); Tue, 28 Apr 2015 16:05:27 -0400 Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id E62172081B for ; Tue, 28 Apr 2015 16:05:26 -0400 (EDT) Date: Tue, 28 Apr 2015 22:05:24 +0200 From: Greg KH To: Chas Williams III Cc: "stable@vger.kernel.org" Subject: Re: Backport of 8b01fc86b9 (take i_mutex during ...) for 3.14.y Message-ID: <20150428200524.GA31347@kroah.com> References: <1430250910.32002.5.camel@REM-DF8MK12.vyatta.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1430250910.32002.5.camel@REM-DF8MK12.vyatta.com> Sender: stable-owner@vger.kernel.org List-ID: On Tue, Apr 28, 2015 at 01:55:10PM -0600, Chas Williams III wrote: > Hello, this is a backport of 8b01fc86b9 for 3.14.y. Please > apply as this addresses CVE-2015-3339. > > Thanks! > > From: Jann Horn > Date: Sun, 19 Apr 2015 02:48:39 +0200 > Subject: [PATCH] fs: take i_mutex during prepare_binprm for set[ug]id > executables > > This prevents a race between chown() and execve(), where chowning a > setuid-user binary to root would momentarily make the binary setuid > root. > > This patch was mostly written by Linus Torvalds. > > Signed-off-by: Jann Horn > Signed-off-by: Linus Torvalds > [ciwillia@brocade.com: backport to 3.14: context] > --- You aren't going to sign off on your changes? Why not?