> a) open_namei() with O_CREAT, O_TRUNC but without O_NOFOLLOW is
> called in fs/binfmt_aout::119, arch/mips/kernel/irixelf.c::1200,
> arch/sparc64/kernel/binfmt_aout32::109. Security hole (see
> binfmt_elf)
oops... my fault. When I updated binfmt_elf I didn't even think about
the others (because I don't use them).
-cw
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/