diff options
| author | Alan Cox <[email protected]> | 2007-04-16 22:53:13 -0700 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2007-04-17 16:36:26 -0700 |
| commit | c4bbafda70a0fc95c6595bffd6825ef264050d01 (patch) | |
| tree | 92860180bea4f2e1fd515432bb165c7ae628d2af /include/linux/errqueue.h | |
| parent | c4b7e8754e3198eb5392568e523da6440143c2cd (diff) | |
exec.c: fix coredump to pipe problem and obscure "security hole"
The patch checks for "|" in the pattern not the output and doesn't nail a
pid on to a piped name (as it is a program name not a file)
Also fixes a very very obscure security corner case. If you happen to have
decided on a core pattern that starts with the program name then the user
can run a program called "|myevilhack" as it stands. I doubt anyone does
this.
Signed-off-by: Alan Cox <[email protected]>
Confirmed-by: Christopher S. Aker <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'include/linux/errqueue.h')
0 files changed, 0 insertions, 0 deletions