Ar Sul, 2006-08-20 am 20:21 +0200, ysgrifennodd Willy Tarreau: > Arjan proposed to add a __must_check on the set*uid() function in glibc. > I think that if killing the program is what makes you nervous, we could > at least print a warning in the kernel logs so that the admin of a machine > being abused has a chance to detect what's going on. Would you accept > something like this ? That ratelimited doesn't sound unreasonable - you want to know its happening whatever the cause. You could do it with the kernel or with the audit daemon I guess. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- Follow-Ups:
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Willy Tarreau <[email protected]>
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- References:
- [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Solar Designer <[email protected]>
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: [email protected] (Alex Riesen)
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Solar Designer <[email protected]>
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Alan Cox <[email protected]>
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Willy Tarreau <[email protected]>
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Alan Cox <[email protected]>
- Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- From: Willy Tarreau <[email protected]>
- [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- Prev by Date: Re: [PATCH] introduce kernel_execve function to replace __KERNEL_SYSCALLS__
- Next by Date: Re: [PATCH] introduce kernel_execve function to replace __KERNEL_SYSCALLS__
- Previous by thread: Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- Next by thread: Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits
- Index(es):
 |