Date: Sun, 03 Jun 2018 22:07:52 -0700 From: Cy Schubert <Cy.Schubert@cschubert.com> To: Eugene Grosbein <eugen@grosbein.net> Cc: rgrimes@freebsd.org, Warner Losh <imp@bsdimp.com>, Eitan Adler <eadler@freebsd.org>, src-committers <src-committers@freebsd.org>, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r334543 - head/usr.bin/top Message-ID: <201806040507.w5457q5v007218@slippy.cwsent.com> In-Reply-To: Message from Eugene Grosbein <eugen@grosbein.net> of "Mon, 04 Jun 2018 11:55:39 %2B0700." <5B14C64B.2070602@grosbein.net>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <5B14C64B.2070602@grosbein.net>, Eugene Grosbein writes: > 04.06.2018 4:33, Rodney W. Grimes wrote: > > >>>> Bad side effect of doing that is it is not hard to get a "core" > >>>> from top when run as a user, as it is going to try to write > >>>> to /, and it probably does not have permission for that. > > We already have global sysctl kern.corefile that can be changed to /var/tmp/% > N.core > > Perhaps, a kernel could take a look to process environment to something like > KERN_COREFILE variable for an override of that sysctl? > Only if the file doesn't exist and the lowest level directory is writable by UID. Even then if any directory within the path is not searchable by UID it should be disallowed. Otherwise it would be a CVE. -- Cheers, Cy Schubert <Cy.Schubert@cschubert.com> FreeBSD UNIX: <cy@FreeBSD.org> Web: http://www.FreeBSD.org The need of the many outweighs the greed of the few.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201806040507.w5457q5v007218>