Re: smbd remote file creation vulnerability

[Jarno Huuskonen <Jarno.Huuskonen () uku fi>]

On Mon, Jun 25, Pavol Luptak wrote:
> Linux kernels with openwall patch (with restricted links in /tmp) are
> imunne to this type of attack (following symlinks does not work, link
> owner does not match with file's owner).

The symlink restrictions work only in /tmp (mode 1777) directories, so
making the symlink in your own homedir still works (should work).

-Jarno

-- 
Jarno Huuskonen <Jarno.Huuskonen () removeme uku fi>