Messages in this thread | | | Date | Tue, 29 Apr 2008 12:02:14 -0700 (PDT) | From | Linus Torvalds <> | Subject | Re: [27/37] tehuti: move ioctl perm check closer to function start (CVE-2008-1675) |
| |
On Tue, 29 Apr 2008, Greg KH wrote: > > Hm, that's the way it is in Linus's tree, we should change it there > first.
Done. It will be commit 6203554207728f43cfb9fd48585cd6500da73d42 when I push out (but please point to the original commit that actually adds the check: 6203554 just changes from CAP_NET_ADMIN to CAP_SYS_RAWIO and is not as important as adding the check in the first place.
(I don't know of anybody who actually really uses capabilities with individual bits, so I seriously doubt it matters)
Linus
| |