Re: [PATCH] Reset current->pdeath_signal on SUID binary execution

2007-08-27 Thread Linus Torvalds
On Mon, 27 Aug 2007, Michael Kerrisk wrote: > > But it's not clear to me in which 2.4.x and 2.6.x versions the change > occurred (it isn't in 2.6.23-rc3 -- is it scheduled for 2.6.23-rc4?). It's in current -git (commit d2d56c5f51028cb9f3d800882eb6f4cbd3f9099f), so yes, it will be in -rc4 (w

Re: [PATCH] Reset current->pdeath_signal on SUID binary execution

2007-08-27 Thread Michael Kerrisk
Marcel, >> the attached patch fixes a flaw in the "parent process death signal" >> when executing SUID binaries. An unprivileged user may send arbitrary >> signal to a child process even if it is running with higher privileges. >> >> The idea to fix this issue is to reset pdeath_signal not only on

Re: [PATCH] Reset current->pdeath_signal on SUID binary execution

2007-08-23 Thread Marcel Holtmann
Hi, > the attached patch fixes a flaw in the "parent process death signal" > when executing SUID binaries. An unprivileged user may send arbitrary > signal to a child process even if it is running with higher privileges. > > The idea to fix this issue is to reset pdeath_signal not only on fork, >