Bugtraq mailing list archives
Re: /proc filesystem allows bypassing directory permissions on
From: Pavel Machek <pavel () ucw cz>
Date: Wed, 4 Nov 2009 09:31:10 +0100
On Wed 2009-11-04 09:06:25, Gabor Gombas wrote:
On Wed, Nov 04, 2009 at 10:17:13AM +1100, psz () maths usyd edu au wrote:But, mount requires root (and root can do anything, including shooting himself in the foot).Irrelevant. The statement was that if /proc is not mounted, then the link count tells if there are other ways to access the inode besides the path you have used to access it. I showed you that this statement is false.
You showed almost nothing. If you assume root interference, he can do anything, including overwriting kernel with another one. OTOH /proc is mounted by default... Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
Current thread:
- Re: /proc filesystem allows bypassing directory permissions on Martin Rex (Nov 02)
- Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 02)
- Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 03)
- Re: /proc filesystem allows bypassing directory permissions on Martin Rex (Nov 03)
- Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 03)
- Re: /proc filesystem allows bypassing directory permissions on psz (Nov 04)
- Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 04)
- Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 04)
- Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 04)
- Re: /proc filesystem allows bypassing directory permissions on psz (Nov 04)
- Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 04)
- Re: /proc filesystem allows bypassing directory permissions on Gabor Gombas (Nov 03)
- Re: /proc filesystem allows bypassing directory permissions on Pavel Machek (Nov 02)
- Re: /proc filesystem allows bypassing directory permissions on Dan Yefimov (Nov 03)
- Re: /proc filesystem allows bypassing directory permissions on Pavel Kankovsky (Nov 05)