lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <20071026012217.4cc30390@the-village.bc.nu> Date: Fri, 26 Oct 2007 01:22:17 +0100 From: Alan Cox <alan@...rguk.ukuu.org.uk> To: Mike Waychison <mikew@...gle.com> Cc: linux-fsdevel <linux-fsdevel@...r.kernel.org>, Linux Kernel <linux-kernel@...r.kernel.org> Subject: Re: [patch 1/1] Drop CAP_SYS_RAWIO requirement for FIBMAP On Thu, 25 Oct 2007 16:06:40 -0700 Mike Waychison <mikew@...gle.com> wrote: > Remove the need for having CAP_SYS_RAWIO when doing a FIBMAP call on an open file descriptor. > > It would be nice to allow users to have permission to see where their data is landing on disk, and there really isn't a good reason to keep them from getting at this information. Historically this was done because people felt it was more secure. It also allows you to make some deductions about other activities on the disk but thats probably only a concern for very very security crazed compartmentalised boxes Also historically at least FIBMAP could be abused to crash the system. Now if you can verify that has been fixed I have no problem, but given that I can find no record of that being fixed it would be wise to audit it first and review Chris Evans and other reports about what occurs when FIBMAP is passed random block numbers. FIBMAP has another problem for this general use as well - it takes an int but the block number can now be bigger for very large files on 32bit. Alan - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists