Re: [PATCH] net/unix: drop obsolete fd-recursion limits

2017-07-18 Thread Simon McVittie
On Mon, 17 Jul 2017 at 08:58:21 -0700, David Miller wrote: > > With all of this in mind, lets drop the recursion limit. It has no > > additional security value, anymore. On the contrary, it randomly > > confuses message brokers that try to forward file-descriptors, since > > any sendmsg(2) call can

Re: [PATCH v2] unix: properly account for FDs passed over unix sockets

2016-02-03 Thread Simon McVittie
thing that uses the Red Hat or Slackware sysvinit scripts bundled with dbus, and any Debian derivatives that use sysvinit and have taken security updates from at least Debian 7. Other distro-specific init system glue is up to the relevant distro. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/>

Re: [PATCH v2] unix: properly account for FDs passed over unix sockets

2016-02-03 Thread Simon McVittie
e that recipient to carry out a denial-of-service attack (on what? the sender? the dbus-daemon?) -- Simon McVittie Collabora Ltd. <http://www.collabora.com/>