LWN.net Logo

Version 0.8.51 released

From:  Andreas Gruenbacher <ag@bestbits.at>
To:  <acl-devel@bestbits.at>
Subject:  [Acl-Devel] Version 0.8.51 released
Date:  Sat, 12 Oct 2002 19:19:07 +0200 (CEST)

Hello,

Version 0.8.51 includes fixes in the kernel patches, one of which was
detected by the LSB test suite. From the change log:

2002-10-12 Andreas Grünbacher <a.gruenbacher@computer.org>

        * Release of version 0.8.51

        * Minor locking fix in the cache-def patch: Add a semaphore
          for accessing the list of caches.
        * Fix to the ext[23]_permission() functions: If the group
          file mode permission bits were 0, members of the owning
          group were granted ACL_OTHER permissions instead of
          ACL_GROUP_OBJ permissions; in unusual situations this
          has granted additional permissions.

The locking fix is expected to be almost impossible to exploit; the worst
result would be a kernel crash. The fix in the permission functions only
leads to extra permissions if people are explicitly denied any access to
files by making them a member of the group owning the file, while granting
non-members permissions. This configuration is rarely used.


RECOMMENDATION TO UPGRADE

Upgrading to 0.8.51 is not critical for system reliability, but should be
done within reasonable time to restore correct permission checking.


Regards,
Andreas.

------------------------------------------------------------------------
 Andreas Gruenbacher, a.gruenbacher@computer.org
 Contact information: http://www.bestbits.at/~ag/

_______________________________________________
acl-devel mailing list
acl-devel@bestbits.at
http://acl.bestbits.at/mailman/listinfo/acl-devel

Copyright © 2002, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds