Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1266007

Re: [PATCH] ptrace: use fsuid, fsgid, effective creds for fs access checks

From Willy Tarreau <w@1wt.eu>
Newsgroups linux.kernel
Subject Re: [PATCH] ptrace: use fsuid, fsgid, effective creds for fs access checks
Date 2015-11-09 22:10 +0100
Message-ID <qt1Rn-3jI-17@gated-at.bofh.it> (permalink)
References <qsx6V-8sG-1@gated-at.bofh.it> <qt1HJ-2YW-15@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Mon, Nov 09, 2015 at 12:55:54PM -0800, Andrew Morton wrote:
> > --- a/fs/proc/array.c
> > +++ b/fs/proc/array.c
> > @@ -395,7 +395,8 @@ static int do_task_stat(struct seq_file *m, struct pid_namespace *ns,
> >  
> >  	state = *get_task_state(task);
> >  	vsize = eip = esp = 0;
> > -	permitted = ptrace_may_access(task, PTRACE_MODE_READ | PTRACE_MODE_NOAUDIT);
> > +	permitted = ptrace_may_access(task,
> > +		PTRACE_MODE_READ | PTRACE_MODE_NOAUDIT | PTRACE_MODE_FSCREDS);
> 
> There's lots of ugliness in the patch to do with fitting code into 80 cols. 
> Can we do
> 
> #define PTRACE_foo (PTRACE_MODE_READ|PTRACE_MODE_FSCREDS)
> 
> to avoid all that?

Or even simply bypass the 80-cols rule. Making code ugly or less easy
to read for sake of an arbitrary rule is often not fun, and that's even
more so when it comes to security fixes that people are expected to
easily understand next time they put their fingers there.

Willy

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH] ptrace: use fsuid, fsgid, effective creds for fs access checks Jann Horn <jann@thejh.net> - 2015-11-08 13:20 +0100
  Re: [PATCH] ptrace: use fsuid, fsgid, effective creds for fs access  checks Andrew Morton <akpm@linux-foundation.org> - 2015-11-09 22:00 +0100
    Re: [PATCH] ptrace: use fsuid, fsgid, effective creds for fs access checks Willy Tarreau <w@1wt.eu> - 2015-11-09 22:10 +0100
    Re: [PATCH] ptrace: use fsuid, fsgid, effective creds for fs access  checks Andrew Morton <akpm@linux-foundation.org> - 2015-11-09 22:20 +0100
    Re: [PATCH] ptrace: use fsuid, fsgid, effective creds for fs access  checks Jann Horn <jann@thejh.net> - 2015-11-09 22:20 +0100

csiph-web