Messages in this thread | ![/](/images/icornerl.gif) | | From | (Alan Cox) | Subject | Re: As 2.0 looms | Date | Thu, 9 May 1996 17:42:34 +0100 (BST) |
| |
> Nope, there is no window, because the read() actually checks the same > things that "ptrace" checks. Notably, in order to be able to read the > process memory map, we must have the PF_PTRACED bit set, and then a suid > execve wouldn't succeed anyway.
It depends when the read tests, we could start the read have PF_TRACED turn off and then exec a setuid program. If the read tests per byte we should be ok.
> In short, the new read really _should_ be secure. Knock wood.
Hope so.
Alan
| ![\](/images/icornerr.gif) |