From: Peter Waechtler <pwaechtler@mac.com>
To: Chris Wright <chrisw@osdl.org>
Cc: Andrew Morton <akpm@osdl.org>,
linux-kernel@vger.kernel.org, torvalds@osdl.org
Subject: Re: [PATCH] coredump - as root not only if euid switched
Date: Fri, 23 Apr 2004 09:46:21 +0200 [thread overview]
Message-ID: <3858114.1082706381475.JavaMail.pwaechtler@mac.com> (raw)
On Thursday, April 22, 2004, at 09:53PM, Chris Wright <chrisw@osdl.org> wrote:
>* Peter W�chtler (pwaechtler@mac.com) wrote:
>> Am Do, 2004-04-22 um 11.56 schrieb Andrew Morton:
>> > Peter Waechtler <pwaechtler@mac.com> wrote:
>> > >
>> > > >(why are you trying to unlink the old file anyway?)
>> > > >
>> > >
>> > > For security measure :O
>> > > I tried on solaris: touch the core file as user, open it and wait, dump core
>> > > as root -> nope, couldn't read the damn core - it was unlinked and created!
>> >
>> > hm, OK. There's a window in which someone can come in and recreate the
>> > file, but the open is using O_EXCL|O_CREATE so that seems safe enough.
>>
>> So here is the updated patch with an open coded call to sys_unlink
>
>This patch breaks various ptrace() checks.
>
I guess the mm->dumpable flag was misused then as something like mm->switchUid.
I can add this flag and make the ptrace paths use that.
next reply other threads:[~2004-04-23 7:46 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-04-23 7:46 Peter Waechtler [this message]
-- strict thread matches above, loose matches on Subject: below --
2004-04-23 15:35 [PATCH] coredump - as root not only if euid switched Albert Cahalan
2004-04-23 19:14 ` Peter Wächtler
2004-04-23 17:22 ` Albert Cahalan
2004-04-23 7:16 Peter Waechtler
2004-04-23 17:10 ` Chris Wright
2004-04-23 19:05 ` Peter Wächtler
2004-04-23 7:14 Peter Waechtler
2004-04-22 9:40 Peter Waechtler
2004-04-22 9:56 ` Andrew Morton
2004-04-22 19:43 ` Peter Wächtler
2004-04-22 19:53 ` Chris Wright
2004-04-22 20:05 ` Linus Torvalds
2004-04-22 8:51 Peter Waechtler
2004-04-22 8:55 ` Andrew Morton
2004-04-21 19:20 Peter Wächtler
2004-04-22 1:18 ` Andrew Morton
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3858114.1082706381475.JavaMail.pwaechtler@mac.com \
--to=pwaechtler@mac.com \
--cc=akpm@osdl.org \
--cc=chrisw@osdl.org \
--cc=linux-kernel@vger.kernel.org \
--cc=torvalds@osdl.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.