linux/tools/power/x86
Ali Ahmet MEMIS 607af438e6 tools/power/x86/intel-speed-select: Harden daemon pidfile open
Avoid symlink-based pidfile clobbering by opening the pidfile with
O_NOFOLLOW and validating it with fstat() before locking/writing.

The daemon currently uses a fixed pidfile path under /tmp. A local
unprivileged user can pre-create a symlink at that path and cause a
root-run daemon instance to write into an attacker-chosen file.

Fixes: 7fd786dfbd ("tools/power/x86/intel-speed-select: OOB daemon mode")
Signed-off-by: Ali Ahmet MEMIS <dev@unknownbbqr.xyz>
Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
Cc: stable@kernel.org
2026-06-02 10:39:45 -07:00
..
amd_pstate_tracer tools/power/x86/amd_pstate_tracer: Fix python gnuplot package names 2025-09-23 13:42:20 -05:00
intel_pstate_tracer tools/power/x86/intel_pstate_tracer: python minimum version 2023-09-21 20:35:50 +02:00
intel-speed-select tools/power/x86/intel-speed-select: Harden daemon pidfile open 2026-06-02 10:39:45 -07:00
turbostat tools/power turbostat: v2026.04.21 2026-04-22 11:31:57 -04:00
x86_energy_perf_policy tools/power x86_energy_perf_policy: Version 2026.04.25 2026-04-25 14:18:45 -04:00