mirror of
https://github.com/torvalds/linux.git
synced 2026-09-19 00:58:02 +02:00
Avoid symlink-based pidfile clobbering by opening the pidfile with
O_NOFOLLOW and validating it with fstat() before locking/writing.
The daemon currently uses a fixed pidfile path under /tmp. A local
unprivileged user can pre-create a symlink at that path and cause a
root-run daemon instance to write into an attacker-chosen file.
Fixes:
|
||
|---|---|---|
| .. | ||
| .gitignore | ||
| Build | ||
| hfi-events.c | ||
| isst-config.c | ||
| isst-core-mbox.c | ||
| isst-core-tpmi.c | ||
| isst-core.c | ||
| isst-daemon.c | ||
| isst-display.c | ||
| isst.h | ||
| Makefile | ||