Bugtraq mailing list archives

Re: /proc filesystem allows bypassing directory permissions on Linux


From: psz () maths usyd edu au
Date: Sat, 31 Oct 2009 06:13:52 +1100

... another solution -- allow fcntl() to remove read-only and
append-only limitations, so that behaviour is at least explicit.

Do not lower security, just to emulate /proc sloppiness. (That would be
like fixing a root security bug by doing away with the root password.)
Is there anything (currently) relying on that security?

Paul Szabo   psz () maths usyd edu au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia


Current thread: