bugtraq - Re: /proc filesystem allows bypassing directory permissions on Linux

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <0B268DFB-7427-4982-9E32-7D903CAF9277@antelope.net>
Date: Mon, 26 Oct 2009 12:14:03 -0600
From: Joel Maslak <jmaslak@...elope.net>
To: Pavel Machek <pavel@....cz>
Cc: "bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>
Subject: Re: /proc filesystem allows bypassing directory permissions on Linux

On Oct 23, 2009, at 3:56 PM, Pavel Machek <pavel@....cz> wrote:

> Demonstrate how to get access to the file with /proc unmounted and you
> have a point. Demonstrate how to get access on anything else then
> Linux and you have a point. Otherwise there's a security hole.

If the directory is mounted via NFS or is exported there are several  
ways...so software written to assume directory permissions are  
sufficent to protect users from other unpriveliged users is broken in  
general. Even if it is usually secure enough on non-Linux. It is not  
always.