mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Linus Torvalds <torvalds@linux-foundation.org>
To: Athanasius <link@miggy.org>
Cc: linux-kernel <linux-kernel@vger.kernel.org>,
	Julien TINNES <jt@cr0.org>, Greg KH <gregkh@suse.de>,
	Tavis Ormandy <taviso@sdf.lonestar.org>,
	Christoph Hellwig <hch@infradead.org>,
	Kees Cook <kees@ubuntu.com>, Eugene Teo <eugene@redhat.com>
Subject: Re: [link@miggy.org: Re: [patch 2/8] personality: fix PER_CLEAR_ON_SETID (CVE-2009-1895)]
Date: Sun, 19 Jul 2009 12:47:25 -0700 (PDT)	[thread overview]
Message-ID: <alpine.LFD.2.01.0907191241460.13838@localhost.localdomain> (raw)
In-Reply-To: <20090719193917.GK6722@miggy.org>



On Sun, 19 Jul 2009, Athanasius wrote:
> 
>   Would you agree that having these features default-off would be best?

I'm actually pretty sure that some glibc versions in particular have 
actively used some of the personality bits.

I have this fairly clear memory of seeing 'personality()' system calls in 
strace output from regular programs.

I just tested it, and I'm not seeing it in my current distro for normal 
programs, but the point is, I'm pretty sure that we have real binaries out 
there that depend on personality bits.

So we can't default-off the whole personality thing. We would have to 
default-off just a subset of the bits. Would that be useful? Perhaps.

			Linus

  reply	other threads:[~2009-07-19 19:48 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <20090718202512.GA19587@suse.de>
     [not found] ` <alpine.LFD.2.01.0907181342500.13838@localhost.localdomain>
2009-07-18 21:28   ` Athanasius
2009-07-19  1:38     ` Julien TINNES
2009-07-19 12:27       ` Athanasius
2009-07-19 19:27         ` Linus Torvalds
2009-07-19 19:39           ` Athanasius
2009-07-19 19:47             ` Linus Torvalds [this message]
2009-07-19 19:55           ` Andi Kleen
2009-07-19 22:01           ` Alan Cox

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=alpine.LFD.2.01.0907191241460.13838@localhost.localdomain \
    --to=torvalds@linux-foundation.org \
    --cc=eugene@redhat.com \
    --cc=gregkh@suse.de \
    --cc=hch@infradead.org \
    --cc=jt@cr0.org \
    --cc=kees@ubuntu.com \
    --cc=link@miggy.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=taviso@sdf.lonestar.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Powered by JetHome