lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Mon, 8 Apr 2019 09:20:47 +0300
From:   Amir Goldstein <>
To:     "Darrick J. Wong" <>
Cc:     Dave Chinner <>,
        linux-xfs <>,
        Linux MM <>,
        linux-fsdevel <>,
        Ext4 <>,
        Linux Btrfs <>
Subject: Re: [PATCH 4/4] xfs: don't allow most setxattr to immutable files

On Sun, Apr 7, 2019 at 11:28 PM Darrick J. Wong <> wrote:
> From: Darrick J. Wong <>
> The chattr manpage has this to say about immutable files:
> "A file with the 'i' attribute cannot be modified: it cannot be deleted
> or renamed, no link can be created to this file, most of the file's
> metadata can not be modified, and the file can not be opened in write
> mode."
> However, we don't actually check the immutable flag in the setattr code,
> which means that we can update project ids and extent size hints on
> supposedly immutable files.  Therefore, reject a setattr call on an
> immutable file except for the case where we're trying to unset
> Signed-off-by: Darrick J. Wong <>

Did you miss my comment on v1, or do you not think this use case
is going to hurt any application that is not a rootkit?

chattr +i foo => OK
chattr +i foo => -EPERM


Powered by blists - more mailing lists