Re: sendsys security issue

[Joerg Sonnenberger <joerg@xxxxxxxxxxxxxxxxx>]

On Mon, Nov 07, 2005 at 04:55:33PM -0600, Eric Jacobs wrote:
> 
> I am interested in understanding and possibly fixing the security issue
> that seems to be a problem with using sendsys to send an asynchronous
> request. Anyone have any info?

Other than the memory exhaustion Matt mentions, it is also about atomicy
of process context state. A lot of the kernel depends on the UID not
changing over time during a system call. sendsys breaks this and other
assumptions from the single syscall modell.

Joerg