From owner-freebsd-hackers Wed Oct 22 10:23:10 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id KAA13135 for hackers-outgoing; Wed, 22 Oct 1997 10:23:10 -0700 (PDT) (envelope-from owner-freebsd-hackers) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by hub.freebsd.org (8.8.7/8.8.7) with SMTP id KAA13121 for ; Wed, 22 Oct 1997 10:22:59 -0700 (PDT) (envelope-from j@uriah.heep.sax.de) Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id TAA03228 for freebsd-hackers@FreeBSD.ORG; Wed, 22 Oct 1997 19:22:57 +0200 Received: (from j@localhost) by uriah.heep.sax.de (8.8.7/8.8.5) id TAA01413; Wed, 22 Oct 1997 19:02:25 +0200 (MET DST) Message-ID: <19971022190225.DV50844@uriah.heep.sax.de> Date: Wed, 22 Oct 1997 19:02:25 +0200 From: j@uriah.heep.sax.de (J Wunsch) To: freebsd-hackers@FreeBSD.ORG (FreeBSD hackers) Subject: Re: Possible SERIOUS bug in open()? References: <19971022093040.UM28723@uriah.heep.sax.de> X-Mailer: Mutt 0.60_p2-3,5,8-9 Mime-Version: 1.0 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: ; from Jamil J. Weatherbee on Oct 22, 1997 01:38:11 -0700 Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk As Jamil J. Weatherbee wrote: > > > This was sent to me recently... It seems to be a pretty serious hole > > > in open() and permissions... > > > > Fixed. > > How exactly did you fix it, this is related to what I was saying about > opening a file as RD_ONLY and WR_ONLY, ... Yep, this was in the same boat. The way the fix works, only one of O_RDONLY, O_WRONLY, or O_RDWR should be possible now, and anything else should be rejected as EINVAL. -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)