On Fri, 2006-08-18 at 10:29 +0200, Andi Kleen wrote: > > But still. Is this code secure? > > Any auditing from third parties appreciated. > > I don't know of any obvious flaws (at least assuming the pipe handler > isn't insecure code), but then I'm biased. one angle is... is the userspace handler trusted code by root? Or is it allowed to be per user/user defined binary? In the later case there are all kinds of DoS scenarios possible; in the former it's root doing that to himself ;) -- if you want to mail me at work (you don't), use arjan (at) linux.intel.com - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- Follow-Ups:
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Arjan van de Ven <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- References:
- [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Andi Kleen <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Greg KH <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Andi Kleen <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Andrew Morton <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Andi Kleen <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Alan Cox <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Andrew Morton <[email protected]>
- Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- From: Andi Kleen <[email protected]>
- [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- Prev by Date: Re: [ckrm-tech] [PATCH 2/7] UBC: core (structures, API)
- Next by Date: Re: [Patch] restore the RCU callback to defer put_task_struct() Re: Problems with 2.6.17-rt8
- Previous by thread: Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- Next by thread: Re: [PATCH] [3/3] Support piping into commands in /proc/sys/kernel/core_pattern
- Index(es):
 |