Date: Wed, 7 Dec 2011 10:26:32 -0800 From: Kees Cook <keescook@...omium.org> To: Randy Dunlap <rdunlap@...otime.net> Cc: Andrew Morton <akpm@...ux-foundation.org>, Al Viro <viro@...iv.linux.org.uk>, linux-kernel@...r.kernel.org, linux-fsdevel@...r.kernel.org, linux-doc@...r.kernel.org, Rik van Riel <riel@...hat.com>, Federica Teodori <federica.teodori@...glemail.com>, Lucian Adrian Grijincu <lucian.grijincu@...il.com>, Ingo Molnar <mingo@...e.hu>, Peter Zijlstra <a.p.zijlstra@...llo.nl>, Eric Paris <eparis@...hat.com>, Dan Rosenberg <drosenberg@...curity.com>, kernel-hardening@...ts.openwall.com Subject: Re: [PATCH v2011.1] fs: symlink restrictions on sticky directories On Wed, Dec 7, 2011 at 10:22 AM, Randy Dunlap <rdunlap@...otime.net> wrote: > On 12/06/2011 03:58 PM, Kees Cook wrote: >> + Enabling this solves the problem by permitting symlinks to only > > better: > > Enabling this solves the problem by permitting symlinks to be followed > only when the uid ... > >> + * It will permit symlinks to only be followed when outside a sticky > > similar: > > It will permit symlinks to be followed only when outside a sticky Thanks! I'll update these. -Kees -- Kees Cook ChromeOS Security
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.