Messages in this thread | | | From | (Eric W. Biederman) | Date | Wed, 13 Mar 2013 11:35:15 -0700 | Subject | Re: CLONE_NEWUSER|CLONE_FS root exploit |
| |
Kees Cook <keescook@chromium.org> writes:
> Hi, > > It seem like we should block (at least) this combination. On 3.9, this > exploit works once uidmapping is added. > > http://www.openwall.com/lists/oss-security/2013/03/13/10
Yes. That is a bad combination. It let's chroot confuse privileged processes.
Now to figure out if this is easier to squash by adding a user_namespace to fs_struct or by just forbidding this combination.
Eric
| |