mirror of
https://github.com/torvalds/linux.git
synced 2026-07-27 17:47:41 +02:00
Avoid symlink-based pidfile clobbering by opening the pidfile with
O_NOFOLLOW and validating it with fstat() before locking/writing.
The daemon currently uses a fixed pidfile path under /tmp. A local
unprivileged user can pre-create a symlink at that path and cause a
root-run daemon instance to write into an attacker-chosen file.
Fixes:
|
||
|---|---|---|
| .. | ||
| amd_pstate_tracer | ||
| intel_pstate_tracer | ||
| intel-speed-select | ||
| turbostat | ||
| x86_energy_perf_policy | ||