Re: [PATCH] net/unix: drop obsolete fd-recursion limits

From	David Miller <davem@davemloft.net>
Newsgroups	linux.kernel
Subject	Re: [PATCH] net/unix: drop obsolete fd-recursion limits
Date	2017-07-17 18:00 +0200
Message-ID	<u4gBc-6Zb-23@gated-at.bofh.it> (permalink)
References	<u4aFr-3eJ-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

From: David Herrmann <dh.herrmann@gmail.com>
Date: Mon, 17 Jul 2017 11:35:54 +0200

 ...
> With all of this in mind, lets drop the recursion limit. It has no
> additional security value, anymore. On the contrary, it randomly
> confuses message brokers that try to forward file-descriptors, since
> any sendmsg(2) call can fail spuriously with ETOOMANYREFS if a client
> maliciously modifies the FD while inflight.
> 
> Cc: Alban Crequy <alban.crequy@collabora.co.uk>
> Cc: Simon McVittie <simon.mcvittie@collabora.co.uk>
> Signed-off-by: David Herrmann <dh.herrmann@gmail.com>

Applied, thanks.

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH] net/unix: drop obsolete fd-recursion limits David Herrmann <dh.herrmann@gmail.com> - 2017-07-17 11:40 +0200
  Re: [PATCH] net/unix: drop obsolete fd-recursion limits Tom Gundersen <teg@jklm.no> - 2017-07-17 14:30 +0200
  Re: [PATCH] net/unix: drop obsolete fd-recursion limits David Miller <davem@davemloft.net> - 2017-07-17 18:00 +0200

csiph-web