Date: Wed, 2 Jan 2013 23:06:34 +0400 From: Vasiliy Kulikov <segoon@...nwall.com> To: Kees Cook <keescook@...omium.org> Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>, Dave Reisner <dreisner@...hlinux.org>, LKML <linux-kernel@...n.kernel.org>, kernel-hardening@...ts.openwall.com Subject: Re: [PATCH] debugfs: convert gid= argument from decimal, not octal Hi, (CC'ed kernel-hardening ML) On Wed, Jan 02, 2013 at 10:42 -0800, Kees Cook wrote: > On Wed, Jan 2, 2013 at 10:33 AM, Greg Kroah-Hartman > <gregkh@...uxfoundation.org> wrote: > > On Wed, Jan 02, 2013 at 08:54:37AM -0500, Dave Reisner wrote: > >> This patch technically breaks userspace, but I suspect that anyone who > >> actually used this flag would have encountered this brokenness, declared > >> it lunacy, and already sent a patch. > > > > Kees is the one that originally did this change (I think, right?) > > I recommended the default change, but I think it was Vasiliy that > added the gid option, IIRC. Wow. It was not me :-) IIRC, I haven't proposed debugfs uid/gid stuff after Greg NACK'ed my sysfs uid/gid/umask mount options patch. IIRC, there were talks that debugfs must not be mounted on production systems because it exists for debug reasons only, so no additional security settings are needed. My version of the patch (which was not posted on LKML): http://www.openwall.com/lists/kernel-hardening/2011/06/05/4 (FWIW, it doesn't contain the bug in question.) > > > Kees, any objection to this patch? Will it break your existing systems? > > Regardless, I have no objection -- this should be int, not octal. No objection. GID should be decimal. > -Kees > > > > > thanks, > > > > greg k-h > > > >> > >> Signed-off-by: Dave Reisner <dreisner@...hlinux.org> Reviewed-by: Vasiliy Kulikov <segoon@...nwall.com> > >> --- > >> fs/debugfs/inode.c | 2 +- > >> 1 file changed, 1 insertion(+), 1 deletion(-) Thanks, -- Vasily Kulikov http://www.openwall.com - bringing security into open computing environments
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.