Searched hist:bfb819ea20ce8bbeeba17e1a6418bf8bda91fc28 (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/fs/proc/ |
| H A D | base.c | diff bfb819ea20ce8bbeeba17e1a6418bf8bda91fc28 Tue May 25 14:37:35 CDT 2021 Kees Cook <keescook@chromium.org> proc: Check /proc/$pid/attr/ writes against file opener
Fix another "confused deputy" weakness[1]. Writes to /proc/$pid/attr/
files need to check the opener credentials, since these fds do not
transition state across execve(). Without this, it is possible to
trick another process (which may have different credentials) to write
to its own /proc/$pid/attr/ files, leading to unexpected and possibly
exploitable behaviors.
[1] https://www.kernel.org/doc/html/latest/security/credentials.html?highlight=confused#open-file-credentials
Fixes: 1da177e4c3f41 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
|