Date: Mon, 7 Feb 2005 11:12:35 -0800
From: Chris Wright <chrisw@osdl.org>
To: =?iso-8859-1?Q?Lorenzo_Hern=E1ndez_Garc=EDa-Hierro?= 
	<lorenzo@gnu.org>
Cc: "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
       Chris Wright <chrisw@osdl.org>
Subject: Re: [PATCH] Filesystem linking protections
Message-ID: <20050207111235.Y24171@build.pdx.osdl.net>
References: <1107802626.3754.224.camel@localhost.localdomain>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.2.5i
In-Reply-To: <1107802626.3754.224.camel@localhost.localdomain>; from lorenzo@gnu.org on Mon, Feb 07, 2005 at 07:57:06PM +0100
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 890
Lines: 22

* Lorenzo Hern?ndez Garc?a-Hierro (lorenzo@gnu.org) wrote:
> This patch adds two checks to do_follow_link() and sys_link(), for
> prevent users to follow (untrusted) symlinks owned by other users in
> world-writable +t directories (i.e. /tmp), unless the owner of the
> symlink is the owner of the directory, users will also not be able to
> hardlink to files they do not own.
> 
> The direct advantage of this pretty simple patch is that /tmp races will
> be prevented.

The disadvantage is that it can break things and places policy in the
kernel.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/