Messages in this thread | | | Date | Tue, 1 Jan 2013 12:26:44 +0400 | Subject | Re: [PATCH] prctl: fix validation of an address | From | Andrey Wagin <> |
| |
> > The kernel makes the decision on what is valid via security_mmap_addr(). > Assuming there are no security fears of an untrusted application > tricking some priviledged application to set up these maps the answer is > just calling security_mmap_addr() instead of doing if(addr < > mmap_min_addr) return -EINVAL; > > I don't know if it is a good idea to allow this interface to ever go > below mmap_min_addr, but I do know that using (or even thinking about) > dac_mmap_min_addr is wrong and you should be looking at > security_mmap_addr() if you look at anything...
This sounds reasonable. Thank you for the comments. I'm going to send a second version of this patch.
> > -Eric >
| |