Re: Potential security problem in patch: Fix reading/proc/<pid>/mem when parent dies.

From: Alan Cox
Date: Thu Nov 18 2004 - 20:33:39 EST


On Gwe, 2004-11-19 at 00:52, Linus Torvalds wrote:
> How could we send random signals? That's what the "exit_signal" thing is
> for, and the code does
>
> if (p->exit_signal != -1)
> p->exit_signal = SIGCHLD;
>
> for that.
>
> Is there any other way to set exit_signal afterwards? If so, I think we
> should have a security check at _that_ point.

Ok that makes sense now I look harder at it. While it was added to
protect agains that case the code you quote already covers all the cases
I can see. We can clone new threads but they too will get reparented or
will simply kill us.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/