Re: /proc filesystem allows bypassing directory permissions on Linux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: /proc filesystem allows bypassing directory permissions on Linux
From: Matthew Dempsky <matthew@xxxxxxxxxxx>
Date: Tue, 27 Oct 2009 09:59:41 -0700
Cc: pavel@xxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <alpine.LSU.2.00.0910271128140.6581@xxxxxxxxxxxxxxxxxxxxxx>

On Tue, Oct 27, 2009 at 4:29 AM, Tony Finch <dot@xxxxxxxx> wrote:
> According to POSIX, if you open the directory with O_SEARCH then openat()
> does not re-check search (+x) permissions.

I stand corrected.  (Though my test system doesn't appear to have O_SEARCH.)

References:
- /proc filesystem allows bypassing directory permissions on Linux
  - From: Pavel Machek
- Re: /proc filesystem allows bypassing directory permissions on Linux
  - From: Tony Finch
- Re: /proc filesystem allows bypassing directory permissions on Linux
  - From: Matthew Dempsky
- Re: /proc filesystem allows bypassing directory permissions on Linux
  - From: Tony Finch

Prev by Date: [G-SEC 47-2009] Symantec generic PDF detection bypass
Next by Date: Re: /proc filesystem allows bypassing directory permissions on Linux
Previous by thread: Re: /proc filesystem allows bypassing directory permissions on Linux
Next by thread: Re: /proc filesystem allows bypassing directory permissions on Linux
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux