Re: RELEASE BLOCKER: Linux doesn't follow x86/x86-64 ABI wrt direction flag
From: Paolo Bonzini
Date: Thu Mar 06 2008 - 14:43:46 EST
Jack Lloyd wrote:
On Thu, Mar 06, 2008 at 07:13:20PM +0100, Paolo Bonzini wrote:
A process can send a signal via kill. IOW, a malicious process can
*control when the process would be interrupted* in order to get it into
the signal handler with DF=1.
If the malicious process can send a signal to another process, it
could also ptrace() it. Which is more useful, if you wanted to be
malicious?
1) capabilities(7)
2) sometimes setuid programs send signals (e.g. SIGHUP or SIGUSR1)...
Paolo
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/