Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Eric W. Biederman aa3fbddbb8 ptrace: Don't allow accessing an undumpable mm ... commit 84d77d3f06 upstream. It is the reasonable expectation that if an executable file is not readable there will be no way for a user without special privileges to read the file. This is enforced in ptrace_attach but if ptrace is already attached before exec there is no enforcement for read-only executables. As the only way to read such an mm is through access_process_vm spin a variant called ptrace_access_vm that will fail if the target process is not being ptraced by the current process, or the current process did not have sufficient privileges when ptracing began to read the target processes mm. In the ptrace implementations replace access_process_vm by ptrace_access_vm. There remain several ptrace sites that still use access_process_vm as they are reading the target executables instructions (for kernel consumption) or register stacks. As such it does not appear necessary to add a permission check to those calls. This bug has always existed in Linux. Fixes: v1.0 Reported-by: Andy Lutomirski <luto@amacapital.net> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> [bwh: Backported to 3.16: - Pass around only a write flag, not gup_flags - Adjust context] Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		History 2018-01-01 20:52:11 +00:00
..
boot	alpha: boot: fix build breakage introduced by system.h disintegration	2013-03-08 15:05:34 -08:00
include	alpha: uapi: Add support for __SANE_USERSPACE_TYPES__	2017-11-11 13:33:33 +00:00
kernel	ptrace: Don't allow accessing an undumpable mm	2018-01-01 20:52:11 +00:00
lib	alpha: fix broken network checksum	2014-01-31 09:21:55 -08:00
math-emu	alpha: change to new Makefile flag variables	2011-01-17 05:42:13 +01:00
mm	vm: add VM_FAULT_SIGSEGV handling support	2015-02-04 10:58:27 +00:00
oprofile	oprofilefs_create_...() do not need superblock argument	2013-09-03 22:52:48 -04:00
defconfig	defconfig reduction	2010-08-14 22:26:53 +02:00
Kconfig	Merge git://git.infradead.org/users/eparis/audit	2014-04-12 12:38:53 -07:00
Kconfig.debug	alpha/parisc: remove config variable DEBUG_RWLOCK	2008-02-06 10:41:03 -08:00
Makefile	alpha: makefile: don't enforce small data model for kernel builds	2013-04-07 12:59:30 -07:00