Sure thing. This patch is against 2.6.34, but it appears that it can
apply to >= 2.6.25. Let me know if you need a fix for < 2.6.25.
For those new to the conversation, this patch prevents user "foo" from
using the SWAPEXT ioctl to swap a write-only file owned by user "bar"
into a file owned by "foo" and subsequently reading it. It does so by
checking that the file descriptors passed to the ioctl are also opened
for reading. In addition, after swapping any suid/sgid bits should be
cleared.
-Dan
On Wed, Jun 16, 2010 at 8:11 AM, Christoph Hellwig <hch@xxxxxxxxxxxxx> wrote:
> Dan, can you please send your fixes to the XFS list so that we can
> include them?
>
>
xfs-swapext-ioctl.patch
Description: Text Data
|