> Alan Cox wrote:
>>
>> Linux 2.2.16 security release
>>
>> The following security problems are fixed by this release
>>
>> o Setuid applications. even when correctly checking for failures of
>> setuid() calls could fail to drop priviledges if the invoker had
>> made certain adjustments to the capability sets
>>
> I didn't see this infomation stated anywhere. When was this code
> introduced?
In 2.2.16pre6 / 2.4.0-test1-ac7 ... It was discussed in long thread
named "Capabilities bug(s) / implementation inconsistencies" ...
> Does it effect all 2.2.x ?
Yes.
> 2.3.x ?
Yes.
> 2.0.x ?
Probably not.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/