Re: kernel: fs.suid_dumpable=2 privilege escalation

[Kees Cook <keescook () chromium org>]

On Thu, Apr 16, 2015 at 5:42 AM, Florian Weimer <fweimer () redhat com> wrote:
> Should this be treated as a security vulnerability?
>
> “fs: make dumpable=2 require fully qualified path”
> <http://lwn.net/Articles/503682/>
>
> Some widely-used cronie versions still do not have hardening and parse
> commands in core dumps.

I didn't seek a CVE for this at the time since it requires a pretty
specific combination of configurations. Namely: setting dumpable=2
without a dump handler, which I couldn't find any distro doing. I have
no objection, of course.

-Kees

-- 
Kees Cook
Chrome OS Security