From mboxrd@z Thu Jan  1 00:00:00 1970
From: Florian Zumbiehl <florz@florz.de>
Date: Fri, 21 Aug 2009 10:24:08 +0000
Subject: [security] Race condition in udev
Message-Id: <20090821102407.GA29609@florz.florz.dyndns.org>
List-Id: <linux-hotplug.vger.kernel.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: linux-hotplug@vger.kernel.org

Hi,

reading some of the source of udev, I noticed what I would suspect to be a
race condition with security implications, namely that device nodes
are first mknod()/chmod()ed with the permission mask that they're supposed
to have at the end, but potentially at this point applying to the
wrong owner and group, before then being chown()ed to the correct
owner and group.

Now, I don't understand why this preservation-stuff (existing device nodes
don't get replaced, but instead their permissions get modified) is being
done, which is why I don't have any patch - but if you help me with
that a bit, maybe I would make up some fix ;-)

Florian