diff options
| author | Kees Cook <[email protected]> | 2021-06-08 17:12:21 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2021-06-08 17:24:09 +0000 |
| commit | 591a22c14d3f45cc38bd1931c593c221df2f1881 (patch) | |
| tree | a401c5309eec40ab5304390474e923871e96c509 /tools/perf/scripts/python/stat-cpi.py | |
| parent | Merge tag 'spi-fix-v5.13-rc4' of git://git.kernel.org/pub/scm/linux/kernel/gi... (diff) | |
| download | kernel-591a22c14d3f45cc38bd1931c593c221df2f1881.tar.gz kernel-591a22c14d3f45cc38bd1931c593c221df2f1881.zip | |
proc: Track /proc/$pid/attr/ opener mm_struct
Commit bfb819ea20ce ("proc: Check /proc/$pid/attr/ writes against file opener")
tried to make sure that there could not be a confusion between the opener of
a /proc/$pid/attr/ file and the writer. It used struct cred to make sure
the privileges didn't change. However, there were existing cases where a more
privileged thread was passing the opened fd to a differently privileged thread
(during container setup). Instead, use mm_struct to track whether the opener
and writer are still the same process. (This is what several other proc files
already do, though for different reasons.)
Reported-by: Christian Brauner <[email protected]>
Reported-by: Andrea Righi <[email protected]>
Tested-by: Andrea Righi <[email protected]>
Fixes: bfb819ea20ce ("proc: Check /proc/$pid/attr/ writes against file opener")
Cc: [email protected]
Signed-off-by: Kees Cook <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/stat-cpi.py')
0 files changed, 0 insertions, 0 deletions