Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits

On Sun, Aug 20, 2006 at 12:07:06PM +0200, Alex Riesen wrote:
> Solar Designer, Sun, Aug 20, 2006 02:38:40 +0200:
> > Attached is a trivial patch (extracted from 2.4.33-ow1) that makes
> > set*uid() kill the current process rather than proceed with -EAGAIN when
> > the kernel is running out of memory.  Apparently, alloc_uid() can't fail
> > and return anyway due to properties of the allocator, in which case the
> > patch does not change a thing.  But better safe than sorry.
> 
> Why not ENOMEM?

ENOMEM would not be any better than EAGAIN from the security standpoint.

The problem is that there are lots of privileged userspace programs that
do not bother to check the return value from set*uid() calls (or
otherwise check that the calls succeeded) before proceeding with work
that is only safe to do with the *uid switched as intended.

Alexander
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• Follow-Ups:
  • Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
    • From: Alan Cox <[email protected]>
  • Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
    • From: Arjan van de Ven <[email protected]>

• References:
  • [PATCH] set*uid() must not fail-and-return on OOM/rlimits
    • From: Solar Designer <[email protected]>
  • Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
    • From: [email protected] (Alex Riesen)

• Prev by Date: Re: [PATCH] ext2: avoid needless discard of preallocated blocks
• Next by Date: Re: [PATCH 2.6.18-rc4] aoe [04/13]: zero copy write 1 of 2
• Previous by thread: Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
• Next by thread: Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]