看板
[ Bugtraq ]
討論串/proc filesystem allows bypassing directory permissions on L
共 44 篇文章
內容預覽:
Pavel,. Proc does not need to be fixed, because /proc is referring to a file. inode.. And due to the fact that it's being presented in /proc as an fd,
(還有2445個字)
內容預覽:
> ... another solution -- allow fcntl() to remove read-only and. > append-only limitations, so that behaviour is at least explicit.. Do not lower secu
(還有182個字)
內容預覽:
Jim,. Sorry, but your 'prove' below is wrong!. You are opening the locked down file as root and passing that. fd as input to the nobody process.. So n
(還有2166個字)
內容預覽:
Jim,. Your assumption that the same file descriptor is being re-opened is. wrong!. The file descriptor retrieved via /proc is a new one. It is not the
(還有5265個字)
內容預覽:
psz@maths.usyd.edu.au wrote:. > > According to POSIX, if you open the directory with O_SEARCH then openat()> > does not re-check search (+x) permissio
(還有1615個字)