Bugtraq mailing list archives

Re: /proc filesystem allows bypassing directory permissions on Linux


From: Dan Yefimov <dan () lightwave net ru>
Date: Mon, 26 Oct 2009 19:16:34 +0300

On 26.10.2009 18:30, Casper.Dik () sun com wrote:
In Solaris, you don't have permission to access a file in /proc/<pid>/fd unless
you can control the process<pid>.

$ ls -l /proc/1/fd
/proc/1/fd: Permission denied

If you can control<pid>, then clearly you have access the file anyway
simply by controlling it using a debugger.

In Linux the same access rules apply.
--

Sincerely Your, Dan.


Current thread: