Re: As 2.0 looms
Alan Cox (alan@lxorguk.ukuu.org.uk)
Thu, 9 May 1996 17:42:34 +0100 (BST)
> Nope, there is no window, because the read() actually checks the same
> things that "ptrace" checks. Notably, in order to be able to read the
> process memory map, we must have the PF_PTRACED bit set, and then a suid
> execve wouldn't succeed anyway.
It depends when the read tests, we could start the read have PF_TRACED turn off
and then exec a setuid program. If the read tests per byte we should be ok.
> In short, the new read really _should_ be secure. Knock wood.
Hope so.
Alan