On Mon, 27 Feb 2012, Eric W. Biederman wrote: > The problem that I see is that we may race with a suid exec in which > case the permissions checks might pass for the pre-exec state and then > we get the post exec mm that we don't actually have permissions for, > but we manipulate it anyway. So what? Page migration does not change the behavior of the code. It only changes the latencies seen. The hacker can mess up the code so that the suid exec runs slower? > So we really need to do something silly like get task and > task->self_exec_id. Then perform the permission checks and get the mm. > Then if just before we perform the operation task->self_exec_id is > different restart the system call, or fail with something like -EAGAIN. I am still not convinced as to why we would do this. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>