Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability

[Dan Yefimov <dan () ns15 lightwave net ru>]

On Fri, 17 Aug 2007, Nicolas Rachinsky wrote:

> * Dan Yefimov <dan () ns15 lightwave net ru> [2007-08-17 05:27 +0400]:
> > BTW, SIGKILL and SIGSTOP can be issued by an O_ASYNC file I/O also (look in 
> > fcntl(2) at F_SETSIG section). If you use F_SETSIG for sending SIGKILL or 
> > SIGSTOP, there's nothing to be done with that - that behaviour is well 
>
> Looking in that man page I see:
>        F_GETSIG and F_SETSIG are Linux-specific.
And we consider Linux too. But anyway, they're unexploitable since signals set 
with F_SETSIG are subject to usual permission checks.
-- 

    Sincerely Your, Dan.