Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: /proc filesystem allows bypassing directory permissions on Linux
From: Pavel Machek <pavel () ucw cz>
Date: Fri, 30 Oct 2009 19:31:26 +0100

Hi!

(no html, please).

   Proc does not need to be fixed, because /proc is referring to a file
   inode.

Well, that does not mean /proc does not need fixing.

   You are expecting transactional behavior in /proc, where /proc only
   registers object information.
...
   And I think you would agree about your mis-interpretation earlier
   if not so
   many people had the same mis-interpretation of the virtual /proc
   mechanism

I think you understand the issue by now. But you think it should be
documented better, not fixed. I believe that fixing it is easier and
better option -- because surprises in security area are bad -- but of
course, if this is documented properly, it also stops being so big
problem.
                                                                        Pavel
-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]