Re: [PATCH] bugs around truncate.

ralf@uni-koblenz.de
Fri, 13 Nov 1998 00:54:59 +0100


On Wed, Nov 11, 1998 at 09:36:37AM -0500, Alexander Viro wrote:

> [Cc'd to maintainers]
>
> a) open_namei() with O_CREAT, O_TRUNC but without O_NOFOLLOW is called
> in fs/binfmt_aout::119, arch/mips/kernel/irixelf.c::1200,
> arch/sparc64/kernel/binfmt_aout32::109. Security hole (see binfmt_elf)

I've already applied the same fix as you posted, just didn't yet make it
back to Linus' sources.

Thanks anyway,

Ralf

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/