linux-kernel - 5.x: userland writes to /usr/lib64/firefox/libxul.so

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Thu, 9 Apr 2020 15:22:08 +0200
From:   Udo van den Heuvel <udovdh@...all.nl>
To:     "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: 5.x: userland writes to /usr/lib64/firefox/libxul.so

Hello,

In a bug at https://bugzilla.redhat.com/show_bug.cgi?id=1789477 we found
that firefox (running as a user) can somehow, sometimes write to
/usr/lib64/firefox/libxul.so when it (partly) crashes.
This may point to a situation that should not occur: the library in
question is owned by root and not writable by the user via conventional
methods.
Can anyone confirm this?
How can we approach to solving this issue?
Is this a possible kernel issue?
Or perhaps a linker issue?

Please explain...

Kind regards,
Udo