lkml.org 
[lkml]   [2008]   [Apr]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [27/37] tehuti: move ioctl perm check closer to function start (CVE-2008-1675)


On Tue, 29 Apr 2008, Greg KH wrote:
>
> Hm, that's the way it is in Linus's tree, we should change it there
> first.

Done. It will be commit 6203554207728f43cfb9fd48585cd6500da73d42 when I
push out (but please point to the original commit that actually adds the
check: 6203554 just changes from CAP_NET_ADMIN to CAP_SYS_RAWIO and is not
as important as adding the check in the first place.

(I don't know of anybody who actually really uses capabilities with
individual bits, so I seriously doubt it matters)

Linus


\
 
 \ /
  Last update: 2008-04-29 21:07    [W:0.056 / U:0.804 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site