Date: Tue, 26 Aug 2008 17:58:48 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 148534 for review Message-ID: <200808261758.m7QHwmPD091464@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=148534 Change 148534 by rwatson@rwatson_freebsd_capabilities on 2008/08/26 17:58:27 Add a new todo: fexecve(2) in capability mode shouldn't allow lookup and use of an interpreter from the global namespace. Affected files ... .. //depot/projects/trustedbsd/capabilities/TODO#9 edit Differences ... ==== //depot/projects/trustedbsd/capabilities/TODO#9 (text+ko) ==== @@ -45,3 +45,7 @@ maxprot. - MAC control of capability facility. + +- fxecve(2) may allow eluding capability mode control due to evaluating + script interpreter entries on script file descriptors; when in capability + mode we must disallow script behavior.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200808261758.m7QHwmPD091464>