| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20100116022641.GF3814@khazad-dum.debian.net> Date: Sat, 16 Jan 2010 00:26:41 -0200 From: Henrique de Moraes Holschuh <hmh@....eng.br> To: Kay Sievers <kay.sievers@...y.org> Cc: Greg KH <greg@...ah.com>, linux-kernel <linux-kernel@...r.kernel.org> Subject: Re: Driver-Core: devtmpfs - reset inode permissions before unlinking On Thu, 14 Jan 2010, Kay Sievers wrote: > > That said, this does fix a possible security problem when a misconfigured > > system is used, and the fix looks rather simple... Can it go to -stable > > eventually, even if it is months in the future, after it gets some testing > > in .34 ? Minor problems are still problems... > > Sure, we could do that. There is some stuff in the current .33 kernel, > which could go into .32-stable too, if that's useful. I think it probably would be useful. I understand .32 is going to stay with us for a long time, so it should get any fixes that have withstood the test of time. It is very annoying to have subtly different kernel behaviour (from mainline) in a long-term stable series... -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists