| From: |
| Andreas Gruenbacher <ag@bestbits.at> |
| To: |
| <acl-devel@bestbits.at> |
| Subject: |
| [Acl-Devel] Version 0.8.51 released |
| Date: |
| Sat, 12 Oct 2002 19:19:07 +0200 (CEST) |
Hello,
Version 0.8.51 includes fixes in the kernel patches, one of which was
detected by the LSB test suite. From the change log:
2002-10-12 Andreas Grünbacher <a.gruenbacher@computer.org>
* Release of version 0.8.51
* Minor locking fix in the cache-def patch: Add a semaphore
for accessing the list of caches.
* Fix to the ext[23]_permission() functions: If the group
file mode permission bits were 0, members of the owning
group were granted ACL_OTHER permissions instead of
ACL_GROUP_OBJ permissions; in unusual situations this
has granted additional permissions.
The locking fix is expected to be almost impossible to exploit; the worst
result would be a kernel crash. The fix in the permission functions only
leads to extra permissions if people are explicitly denied any access to
files by making them a member of the group owning the file, while granting
non-members permissions. This configuration is rarely used.
RECOMMENDATION TO UPGRADE
Upgrading to 0.8.51 is not critical for system reliability, but should be
done within reasonable time to restore correct permission checking.
Regards,
Andreas.
------------------------------------------------------------------------
Andreas Gruenbacher, a.gruenbacher@computer.org
Contact information: http://www.bestbits.at/~ag/
_______________________________________________
acl-devel mailing list
acl-devel@bestbits.at
http://acl.bestbits.at/mailman/listinfo/acl-devel