Messages in this thread | | | From | David Howells <> | Subject | Re: [RFC PATCH 3/4] kmod - add call_usermodehelper_ns() helper | Date | Wed, 26 Nov 2014 11:46:22 +0000 |
| |
Eric W. Biederman <ebiederm@xmission.com> wrote:
> Ian if we were to merge this I believe you would win the award for > easiest path to a root shell.
Is there any particular reason the upcalled program has to be run as root? Could the kernel not run it as something else - perhaps the caller's UID,GID or even something anonymous?
Also, call_sbin_request_key() could be given a parameter to call something other than /sbin/request-key, and key_type::request_key could be used.
David
| |