]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
exec.c: fix coredump to pipe problem and obscure "security hole"
authorAlan Cox <alan@lxorguk.ukuu.org.uk>
Tue, 17 Apr 2007 23:59:01 +0000 (23:59 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Wed, 2 May 2007 00:05:59 +0000 (17:05 -0700)
commit12b1ca6601c0ff4bc4fe44f8d631cd3eeaf18c88
tree1ad86cbfc15f6eb3a5d5e2d0bc50ba3fd57b2665
parenta9c01941701641d505c07e7364a03447c694f6e8
exec.c: fix coredump to pipe problem and obscure "security hole"

exec.c: fix coredump to pipe problem and obscure "security hole"

The patch checks for "|" in the pattern not the output and doesn't nail a
pid on to a piped name (as it is a program name not a file)

Also fixes a very very obscure security corner case.  If you happen to have
decided on a core pattern that starts with the program name then the user
can run a program called "|myevilhack" as it stands.  I doubt anyone does
this.

Signed-off-by: Alan Cox <alan@redhat.com>
Confirmed-by: Christopher S. Aker <caker@theshore.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/exec.c