Linux-kernel mailing list archive 1998-31,: Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

# Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

Jon Lewis (jlewis@inorganic5.fdt.net)
Tue, 4 Aug 1998 15:42:54 -0400 (EDT)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: H.J. Lu: "Re: NFS problem"
- Previous message: Theodore Y. Ts'o: "Re: DEVFSv50 and /dev/fb? (or /dev/fb/? ???)"
- In reply to: David S. Miller: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"
- Next in thread: Albert D. Cahalan: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"

On Tue, 4 Aug 1998, David S. Miller wrote:

> And I think this is great. It's a seperate kernel patch which serves
> the needs of some people very well.

But the fact that it's seperate makes it a PITA for mere mortals to keep
up to date kernels. i.e. A new kernel is released and the various patch
sets they use don't apply cleanly. Then they get to do lots of head
scratching and beard pulling while manually fixing rejections, or they get
to wait to upgrade until the maintainer of each patch set releases an
updated version.

> problem extremely well (limited number of scsi/tty/etc. devices). But
> because it was unclean and not really the correct solution to the
> problem, it never went into Linus's tree.

So the question is, should patches that are of value but not "the one true
solution to the problem" be integrated into the mainstream kernel source
and be replaced when something better comes along, or should everyone just
have to wail until a perfect solution is ready?

------------------------------------------------------------------
Jon Lewis <jlewis@fdt.net> | Spammers will be winnuked or
Network Administrator | drawn and quartered...whichever
Florida Digital Turnpike | is more convenient.
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

- Next message: H.J. Lu: "Re: NFS problem"
- Previous message: Theodore Y. Ts'o: "Re: DEVFSv50 and /dev/fb? (or /dev/fb/? ???)"
- In reply to: David S. Miller: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"
- Next in thread: Albert D. Cahalan: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"