> [Cc'd to maintainers]
>
> a) open_namei() with O_CREAT, O_TRUNC but without O_NOFOLLOW is called
> in fs/binfmt_aout::119, arch/mips/kernel/irixelf.c::1200,
> arch/sparc64/kernel/binfmt_aout32::109. Security hole (see binfmt_elf)
I've already applied the same fix as you posted, just didn't yet make it
back to Linus' sources.
Thanks anyway,
Ralf
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/