Date: Wed, 21 Jan 2015 20:49:47 +0000 From: Ben Hutchings <ben@...adent.org.uk> To: Solar Designer <solar@...nwall.com> Cc: oss-security@...ts.openwall.com Subject: Re: [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks On Wed, 2015-01-21 at 13:54 +0300, Solar Designer wrote: > Ben, all - > > On Sat, Jan 17, 2015 at 11:26:46PM +0000, Ben Hutchings wrote: > > chown() and write() should clear all privilege attributes on > > a file - setuid, setgid, setcap and any other extended > > privilege attributes. > > > > However, any attributes beyond setuid and setgid are managed by the > > LSM and not directly by the filesystem, so they cannot be set along > > with the other attributes. > [...] > > First of all, thank you for your work on the Linux kernel! > > Going forward, I think it may be better to CC this sort of messages to > the kernel-hardening list (like it's been done on some occasions before, > see below) rather than to oss-security - and only post summary messages > to oss-security, separately (not CC'ed to anywhere else). [...] Sorry, I'd forgotten about that one. I'll try to pick the right list in future. Ben. -- Ben Hutchings Larkinson's Law: All laws are basically false. Download attachment "signature.asc" of type "application/pgp-signature" (812 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.