DragonFly bugs List (threaded) for 2008-02
DragonFly BSD
DragonFly bugs List (threaded) for 2008-02
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: [issue950] Coredumping design error


From: Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>
Date: Fri, 22 Feb 2008 10:49:46 -0800 (PST)

     Ok, I've committed the basic ownership check to the coredump code for
     this release.  I did verify that sgid dumps still work (when enabled
     via the sysctl).

     I have not committed the group/other permissions check, at least not
     yet.  It seems a little excessive considering the access needed to
     exploit such a hole is of far greater consequence then any desire to
     use it to exploit the core dump path would be.

						-Matt




[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]