linux-kernel - sys_chroot+sys

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <46F0CD96.9030807@prepere.com>
Date:	Wed, 19 Sep 2007 09:19:50 +0200
From:	majkls <majkls@...pere.com>
To:	bunk@...tum.de
CC:	linux-kernel@...r.kernel.org
Subject: sys_chroot+sys_fchdir Fix

Hello,
here is an fix to an exploit (obtained somewhere in internet). This 
exploit can workaround chroot with CAP_SYS_CHROOT. It is also possible 
(with sufficient filedescriptor (if there is na directory fd opened in 
root) workaround chroot with sys_fchdir. This patch fixes it.

Miloslav Semler

View attachment "sys_chroot+sys_fchdir.patch" of type "text/x-diff" (3265 bytes)

View attachment "chroot.c" of type "text/x-csrc" (4108 bytes)