Re: Getting path in inode_permission

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 07 Feb 2015 01:57:44 +0530, noyb noybee said:
> I need the path lookup data as I need to specifically block inode
> loopkups originating from a certain path

Then just make sure the inodes you don't want accessed aren't in the
namespace.

Hint:  "from a certain path" is almost guaranteed to be a security hole,
because all the attacker has to do is cwd() to some different path.  And
there's ../ games that can be played, and so on.

So what are you trying to protect by blocking some lookups? What's the
threat model here?

Attachment: pgpkbzYmGFbLZ.pgp
Description: PGP signature

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@xxxxxxxxxxxxxxxxx
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies

[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux