netdev - [resent x2][iputils][patch 01-07] setuid/capabilities fixups

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 21 Mar 2013 15:38:07 +0400
From:	Yuriy Kaminskiy <yumkam@...il.com>
To:	netdev@...r.kernel.org
Subject: [resent x2][iputils][patch 01-07] setuid/capabilities fixups

Yuriy Kaminskiy wrote:
> Yuriy Kaminskiy wrote:
>> Run ping, look at /proc/`pidof ping`/status -> capabilities are not
>> [permanently] dropped, some of uids are not dropped, etc. Fix assorted issues
>> with setuid and capabilities drop. Limited testing only, please review/check
>> carefully.

ping.

View attachment "0001-arping-ping-ping6-traceroute2-clockdiff-drop-fsuid-a.patch" of type "text/x-diff" (2800 bytes)

View attachment "0002-ping-permanently-drop-capabilities-before-entering-m.patch" of type "text/x-diff" (554 bytes)

View attachment "0003-arping-use-seteuid-for-temporal-uid-changes.patch" of type "text/x-diff" (609 bytes)

View attachment "0004-arping-ping_common-reset-euid-before-permanent-drop.patch" of type "text/x-diff" (1025 bytes)

View attachment "0005-ping-ping6-arping-clockdiff-Fix-CAP_SETUID-setuid-in.patch" of type "text/x-diff" (2783 bytes)

View attachment "0006-ninfod-use-u-without-capabilities-too.patch" of type "text/x-diff" (662 bytes)

View attachment "0007-ninfod-fix-capabilities-setting.patch" of type "text/x-diff" (3185 bytes)