lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 13 Oct 2009 11:28:11 +0200
From:	Philipp Reisner <philipp.reisner@...bit.com>
To:	Greg KH <greg@...ah.com>
Cc:	linux-kernel@...r.kernel.org, serue@...ibm.com,
	Philipp Reisner <philipp.reisner@...bit.com>
Subject: [PATCH 0/7] SECURITY ISSUE with connector for 2.6.31.y

The backported edition of the patchset for 2.6.31-stable.

Philipp Reisner (7):
  connector: Keep the skb in cn_callback_data
  connector: Provide the sender's credentials to the callback
  connector: Removed the destruct_data callback since it is always
    kfree_skb()
  dm/connector: Only process connector packages from privileged
    processes
  dst/connector: Disallow unpliviged users to configure dst
  pohmelfs/connector: Disallow unpliviged users to configure pohmelfs
  uvesafb/connector: Disallow unpliviged users to send netlink packets

 Documentation/connector/cn_test.c      |    4 +---
 Documentation/connector/connector.txt  |    8 ++++----
 drivers/connector/cn_proc.c            |    3 +--
 drivers/connector/cn_queue.c           |   15 ++++++++++-----
 drivers/connector/connector.c          |   24 +++++++++---------------
 drivers/md/dm-log-userspace-transfer.c |    6 ++++--
 drivers/staging/dst/dcore.c            |    8 ++++++--
 drivers/staging/pohmelfs/config.c      |    6 ++++--
 drivers/video/uvesafb.c                |    6 ++++--
 drivers/w1/w1_netlink.c                |    3 +--
 include/linux/connector.h              |   11 ++++-------
 11 files changed, 48 insertions(+), 46 deletions(-)

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ