Re: Linux 3.6
[Posted October 3, 2012 by corbet]
| From: |
| Alan Cox <alan-AT-lxorguk.ukuu.org.uk> |
| To: |
| Kees Cook <kees-AT-outflux.net> |
| Subject: |
| Re: Linux 3.6 |
| Date: |
| Wed, 3 Oct 2012 21:49:29 +0100 |
| Message-ID: |
| <20121003214929.107b3b48@pyramind.ukuu.org.uk> |
| Cc: |
| Nick Bowler <nbowler-AT-elliptictech.com>,
Linus Torvalds <torvalds-AT-linux-foundation.org>,
Linux Kernel Mailing List <linux-kernel-AT-vger.kernel.org> |
| Archive‑link: | |
Article |
On Wed, 3 Oct 2012 13:05:15 -0700
Kees Cook <kees@outflux.net> wrote:
> Hi Nick,
>
> 3.6 introduced link restrictions:
>
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;...
>
> It sounds like you've got symlinks in a world-writable directory, and
> you're following those symlinks across mis-matched uids. You can either
> have the symlinks be owned by the directory owner, or you can turn off
> symlink restrictions in sysctl:
>
> # echo 0 > /proc/sys/fs/protected_symlinks
Quite honestly that should be pushed for 3.6.1 as a default - ASAP.
Alan
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
