Re: [security]: kernel ioctl()'s [2]

Jamie Lokier (lkd@tantalophile.demon.co.uk)
Fri, 2 Jul 1999 01:44:35 +0200

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: George: "Re: The stability crisis"
Previous message: Chris Evans: "Re: [security]: kernel ioctl()'s [3]"

Chris Evans wrote:
> ext2 has the ioctl() EXT2_IOC_SETVERSION.
>
> This allows _any_ user to set an inode's "version".
>
> Unfortunately, in the case of ext2 directories, inode->i_version seems to
> be used for consistency checks if operations sleep. Hence, allowing users
> arbitrary write access to this value could be used for mischief.

Look closer, EXT2_IOC_SETVERSION sets inode->u.ext2_i.i_version which is
different from inode->i_version :-)

-- Jamie

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

Next message: George: "Re: The stability crisis"
Previous message: Chris Evans: "Re: [security]: kernel ioctl()'s [3]"