★ wanayoo — archive 1999 http://www.kernelnotes.org/patch/21-p0771.html

Security hole in 2.1.48 + the plug for it

Chris Evans (chris@ferret.lmh.ox.ac.uk)
Tue Aug 12 02:25:00 1997

[Home] [Linux 2.0] [Linux 2.1] [Information] [Software] [Distributions] [Links]

Patch Index 2.1 Unofficial Patches
Previous Patch: Fix for exit_notify()
Next Patch: SysRq-N Update to work where PID's rollover

21-immutable-secure.patch

Over the weekend I started a little patch to actually secure immutable and append-only files when securelevel is set (writes to block devices are disallowed, and numerous other things denied).
I poked around the kernel sources, to check for oversights in the handling of immutable and append-only files, and look what I found....
The patch is relative to 2.1.48. It might be worthwhile backporting it for inclusion into 2.0.31, to accompany the "rename on top of immutable" fix.

[Home] [Up] [Search] [FeedBack]