Complexity
Complexity
Posted Mar 21, 2013 21:05 UTC (Thu) by dgc (subscriber, #6611)In reply to: Complexity by dpquigl
Parent article: Anatomy of a user namespaces vulnerability
> Maybe he's talking about debug file systems or tools that are available
> for certain file systems like XFS that let you manipulate the inodes
> of a filesystem directly?
> for certain file systems like XFS that let you manipulate the inodes
> of a filesystem directly?
File handles are the problem. And when combined with interfaces like bulkstat, you've got a capability to find, open and *invisibly modify* any file in the filesystem regardless of namespace restrictions...
http://oss.sgi.com/archives/xfs/2013-03/msg00382.html
-Dave