netdev - [resent][iputils][patch 01-07] setuid/capabilities fixups

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 07 Mar 2013 19:13:02 +0400
From:	Yuriy Kaminskiy <yumkam@...il.com>
To:	netdev@...r.kernel.org
Subject: [resent][iputils][patch 01-07] setuid/capabilities fixups

Yuriy Kaminskiy wrote:
> Run ping, look at /proc/`pidof ping`/status -> oops (capabilities are not
> [permanently] dropped, some of uids are not dropped, etc). Fix assorted issues
> with setuid and capabilities drop. Limited testing only, please review/check
> carefully.



View attachment "0001-arping-ping-ping6-traceroute2-clockdiff-drop-fsuid-a.patch" of type "text/x-diff" (2800 bytes)

View attachment "0002-ping-permanently-drop-capabilities-before-entering-m.patch" of type "text/x-diff" (554 bytes)

View attachment "0003-arping-use-seteuid-for-temporal-uid-changes.patch" of type "text/x-diff" (609 bytes)

View attachment "0004-arping-ping_common-reset-euid-before-permanent-drop.patch" of type "text/x-diff" (1025 bytes)

View attachment "0005-ping-ping6-arping-clockdiff-Fix-CAP_SETUID-setuid-in.patch" of type "text/x-diff" (2783 bytes)

View attachment "0006-ninfod-use-u-without-capabilities-too.patch" of type "text/x-diff" (662 bytes)

View attachment "0007-ninfod-fix-capabilities-setting.patch" of type "text/x-diff" (3185 bytes)