Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Jann Horn fb8aa6acf1 fs: take i_mutex during prepare_binprm for set[ug]id executables ...

commit 8b01fc86b9 upstream.

This prevents a race between chown() and execve(), where chowning a
setuid-user binary to root would momentarily make the binary setuid
root.

This patch was mostly written by Linus Torvalds.

Signed-off-by: Jann Horn <jann@thejh.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
[ luis: backported to 3.16:
  - relaced task_no_new_privs() by current->no_new_privs
  - replaced READ_ONCE() by ACCESS_ONCE() ]
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>

2015-04-28 12:35:37 +01:00

1637 lines

38 KiB

Raw Blame History