Re: [PATCH] fs/exec: require argv[0] presence in do_execveat_common()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm not really opposed  to attempting to change this with consensus
(like, actually  proposing it on the Austin Group tracker), but a less
invasive change would be  just enforcing it for the case where exec is
a privilege boundary  (suid/sgid/caps). There's really no motivation
for changing  longstanding standard behavior in a
non-privilege-boundary  case.

I don't really see it as a matter of "maintaining standard behavior".

there are very little uses for this ABI feature to be present and only serves to make applications harder to port between Linux and other *nix systems. The pros (major vulnerabilities like CVE-2021-4034) outweigh the cons (minor userland ABI change that only affects shellcode on shell-storm.org) in this particular scenario, and I am all for this patch.



[Index of Archives]     [Linux Ext4 Filesystem]     [Union Filesystem]     [Filesystem Testing]     [Ceph Users]     [Ecryptfs]     [NTFS 3]     [AutoFS]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Cachefs]     [Reiser Filesystem]     [Linux RAID]     [NTFS 3]     [Samba]     [Device Mapper]     [CEPH Development]

  Powered by Linux