Date: Wed, 29 Jul 2009 09:20:02 GMT From: Marc Olzheim <zlo@zlo.nu> To: freebsd-fs@FreeBSD.org Subject: Re: kern/127213: [tmpfs] sendfile on tmpfs data corruption Message-ID: <200907290920.n6T9K2TZ025796@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/127213; it has been noted by GNATS. From: Marc Olzheim <zlo@zlo.nu> To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/127213: [tmpfs] sendfile on tmpfs data corruption Date: Wed, 29 Jul 2009 10:51:40 +0200 This is not just a bug, but a security hole. What you are seeing is the content of other VM pages. This has exactly the same symptoms as http://security.freebsd.org/advisories/FreeBSD-SA-05:02.sendfile.asc In short: do not use tmpfs unless you trust all users on the system with root access.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200907290920.n6T9K2TZ025796>