All of lore.kernel.org
 help / color / mirror / Atom feed
From: Richard Weinberger <richard@nod.at>
To: Tomas Bortoli <tomasbortoli@hotmail.it>
Cc: "linux-fsdevel@vger.kernel.org" <linux-fsdevel@vger.kernel.org>
Subject: Re: ext3 and like, mount point in module
Date: Sat, 1 Aug 2015 15:27:17 +0200	[thread overview]
Message-ID: <55BCC935.2000908@nod.at> (raw)
In-Reply-To: <DUB109-W314DF4407AB469152E3A9B6890@phx.gbl>

Am 01.08.2015 um 15:10 schrieb Tomas Bortoli:
> Thanks for the clarification!
> I'm trying to make a patch to slightly improve security in file system.
> It consists in removing the ".." dir entry in the "/" dir of the file system mounted on the root mount point.

What about chroot/namespaces/etc? :)

> This could prevent an attacker from using a long series of "../../../" etc in a  transversal directory attack 
> with unknown initial relative path to reach the root dir for sure and then move from there.
> The dangerousness depends from which is the flaw
> Do you think it's worth it?

I'm not sure if it is worth the hassle, I bet some applications depend on that behavior.
But you can give it a try, I'd insert a negative dentry for ".." if ".." is child of the current
root.

Thanks,
//richard

  reply	other threads:[~2015-08-01 13:27 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-08-01 12:27 ext3 and like, mount point in module Tomas Bortoli
2015-08-01 12:46 ` Richard Weinberger
2015-08-01 13:10   ` Tomas Bortoli
2015-08-01 13:27     ` Richard Weinberger [this message]
2015-08-01 13:43       ` Al Viro
2015-08-01 14:34       ` Tomas Bortoli
2015-08-05 17:17         ` Eric W. Biederman

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=55BCC935.2000908@nod.at \
    --to=richard@nod.at \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=tomasbortoli@hotmail.it \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.