From: Alan Cox <alan@redhat.com>
To: Tigran Aivazian <tigran@aivazian.fsnet.co.uk>
Cc: Solar Designer <solar@openwall.com>, Alan Cox <alan@redhat.com>,
Marcelo Tosatti <marcelo.tosatti@cyclades.com>,
linux-kernel@vger.kernel.org
Subject: Re: question about /proc/<PID>/mem in 2.4 (fwd)
Date: Fri, 23 Jul 2004 13:34:25 -0400 [thread overview]
Message-ID: <20040723173425.GA15472@devserv.devel.redhat.com> (raw)
In-Reply-To: <Pine.LNX.4.44.0407181336040.2374-100000@einstein.homenet>
On Sun, Jul 18, 2004 at 01:41:34PM +0100, Tigran Aivazian wrote:
> > | setuidapp < /proc/self/mem
> >
> > ...
> > See Alan's example I've quoted above. In this scenario, it would be
> > the program being attacked which will be checked for possession of the
> > capability... if it is SUID root, the attack will succeed.
>
> In the above example there is nothing forbidden and the current state of
> things doesn't prevent the program from reading it's own address space.
I meant to say exec setuidapp </proc/self/mem
prev parent reply other threads:[~2004-07-23 17:35 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-07-07 13:28 question about /proc/<PID>/mem in 2.4 (fwd) Tigran Aivazian
2004-07-07 23:48 ` Solar Designer
2004-07-18 12:41 ` Tigran Aivazian
2004-07-18 12:59 ` Solar Designer
2004-07-18 21:27 ` Willy Tarreau
2004-07-18 23:15 ` Paul Jackson
2004-07-19 4:54 ` Willy Tarreau
2004-07-19 6:47 ` Paul Jackson
2004-07-22 20:34 ` Alan Cox
2004-07-22 21:23 ` Paul Jackson
2004-07-23 17:34 ` Alan Cox [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040723173425.GA15472@devserv.devel.redhat.com \
--to=alan@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=marcelo.tosatti@cyclades.com \
--cc=solar@openwall.com \
--cc=tigran@aivazian.fsnet.co.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox