Re: [PATCH] coredump - as root not only if euid switched

From: Peter Waechtler
Date: Thu Apr 22 2004 - 04:42:23 EST



On Thursday, April 22, 2004, at 10:55AM, Andrew Morton <akpm@xxxxxxxx> wrote:

>Peter Waechtler <pwaechtler@xxxxxxx> wrote:
>>
>> But I agree that sys_unlink should be the fast call and dumping core
>> is the exception :)
>>
>> would fastcall do_unlink() help? I guess the arg is then passed in a
>> register
>
>I've never been able to measure any size or space benefit for fastcall, and
>we do it via compiler options kernel-wide nowadays.
>
>The above will work fine. You can probably just open-code it at the place
>where you're unlinking the file.
>
>(why are you trying to unlink the old file anyway?)
>

For security measure :O
I tried on solaris: touch the core file as user, open it and wait, dump core
as root -> nope, couldn't read the damn core - it was unlinked and created!
So do I want.
I will sent the new patch from home.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/