| |||||||||||||
A privilege escalation flaw in udevA privilege escalation flaw in udevPosted Apr 23, 2009 11:52 UTC (Thu) by etienne_lorrain@yahoo.fr (guest, #38022)In reply to: A privilege escalation flaw in udev by nix Parent article: A privilege escalation flaw in udev
> Can anyone think of a reason why mknod() allows *anyone*
> to create device nodes outside /dev?
How would you ask ioctl like BLKBSZGET, BLKSSZGET, BLKGETSIZE,
There is maybe a better solution (without having to guess the mount
(Log in to post comments)
A privilege escalation flaw in udev Posted Apr 23, 2009 13:56 UTC (Thu) by nix (subscriber, #2304) [Link]
This looks like a reason why a /sys/block entry containing a device node for each device rather than just a textual representation of (major, minor) might be useful: but that was already rejected :/
|
|||||||||||||