linux-ext4 - Re: [Bug 60676] Stat system call gives permission denied to root for links under a sticky bit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAGW2f1GKwjhpMTKmq6ypFovvSv4Ci_8mZGsmhcf+2AygGYqk0w@mail.gmail.com>
Date:	Fri, 2 Aug 2013 03:16:46 +0000
From:	jon ernst <jonernst07@...il.com>
To:	bugzilla-daemon@...zilla.kernel.org
Cc:	linux-ext4@...r.kernel.org
Subject: Re: [Bug 60676] Stat system call gives permission denied to root for
 links under a sticky bit

I checked the code. Seems like those 2 proc entries are 0 by default
in current tree. Maybe James are using kernel before that change. ()

int sysctl_protected_symlinks __read_mostly = 0;
int sysctl_protected_hardlinks __read_mostly = 0;

On Fri, Aug 2, 2013 at 12:44 AM,  <bugzilla-daemon@...zilla.kernel.org> wrote:
> https://bugzilla.kernel.org/show_bug.cgi?id=60676
>
> --- Comment #3 from Theodore Tso <tytso@....edu> ---
> On Thu, Aug 01, 2013 at 11:21:16AM -0700, Christoph Hellwig wrote:
>> Try reverting 800179c9b8a1e796e441674776d11cd4c05d61d7
>
> Or just do:
>
> echo 0 > /proc/sys/fs/protected_hardlinks
> echo 0 > /proc/sys/fs/protected_symlinks
>
> (or put the equivalent in /etc/sysctl.conf).
>
> There is a **very** detailed description of the design decision behind
> this change (which went in as of 3.6) in the commit description.  See:
>
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=800179c9b8a1e796e441674776d11cd4c05d61d7
>
> In any case, it's "working as designed".
>
>                         - Ted
>
> --
> You are receiving this mail because:
> You are watching the assignee of the bug.
> --
> To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
> the body of a message to majordomo@...r.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html