Kees Cook 54b501992d coredump: warn about unsafe suid_dumpable / core_pattern combo ...

When suid_dumpable=2, detect unsafe core_pattern settings and warn when
they are seen.

Signed-off-by: Kees Cook <keescook@chromium.org>
Suggested-by: Andrew Morton <akpm@linux-foundation.org>
Cc: Alexander Viro <viro@zeniv.linux.org.uk>
Cc: Alan Cox <alan@linux.intel.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Doug Ledford <dledford@redhat.com>
Cc: Serge Hallyn <serge.hallyn@canonical.com>
Cc: James Morris <james.l.morris@oracle.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2012-07-30 17:25:11 -07:00

..

debug

kdb: Switch to nolock variants of kmsg_dump functions

2012-07-21 10:34:00 -07:00

events

perf: Introduce perf_pmu_migrate_context()

2012-06-18 12:13:21 +02:00

gcov

…

irq

Merge tag 'dt-for-3.6' of git://sources.calxeda.com/kernel/linux

2012-07-24 14:07:22 -07:00

power

Merge tag 'pm-for-3.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

2012-07-22 13:36:52 -07:00

sched

sched: Fix race in task_group()

2012-07-24 13:58:20 +02:00

time

Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2012-07-22 11:35:46 -07:00

trace

Merge tag 'staging-3.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2012-07-26 11:14:49 -07:00

.gitignore

…

acct.c

…

async.c

[SCSI] async: make async_synchronize_full() flush all work regardless of domain

2012-07-20 09:07:37 +01:00

audit_tree.c

VFS: Make clone_mnt()/copy_tree()/collect_mounts() return errors

2012-07-14 16:37:27 +04:00

audit_watch.c

get rid of kern_path_parent()

2012-07-14 16:35:02 +04:00

audit.c

netlink: add netlink_kernel_cfg parameter to netlink_kernel_create

2012-06-29 16:46:02 -07:00

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

cgroup_freezer.c

…

cgroup.c

Merge branch 'for-3.6' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

2012-07-24 17:47:44 -07:00

compat.c

…

configs.c

…

cpu_pm.c

…

cpu.c

kernel/cpu.c: document clear_tasks_mm_cpumask()

2012-05-31 17:49:30 -07:00

cpuset.c

cpusets: Remove/update outdated comments

2012-07-24 13:53:28 +02:00

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

posix_types.h: Cleanup stale __NFDBITS and related definitions

2012-07-26 13:36:43 -07:00

extable.c

…

fork.c

Merge branch 'for-linus-2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2012-07-23 12:27:27 -07:00

freezer.c

…

futex_compat.c

…

futex.c

…

groups.c

…

hrtimer.c

hrtimer: Update hrtimer base offsets each hrtimer_interrupt

2012-07-11 23:34:39 +02:00

hung_task.c

…

irq_work.c

…

itimer.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

syscalls, x86: add __NR_kcmp syscall

2012-05-31 17:49:32 -07:00

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kexec.c

…

kfifo.c

…

kmod.c

…

kprobes.c

…

ksysfs.c

…

kthread.c

kthread_worker: reimplement flush_kthread_work() to allow freeing the work item being executed

2012-07-22 10:15:28 -07:00

latencytop.c

…

lglock.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep_states.h

…

lockdep.c

…

Makefile

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2012-06-01 10:34:35 -07:00

module.c

…

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

notifier.c

…

nsproxy.c

…

padata.c

…

panic.c

…

params.c

…

pid_namespace.c

pidns: guarantee that the pidns init will be the last pidns process reaped

2012-06-20 14:39:36 -07:00

pid.c

…

posix-cpu-timers.c

…

posix-timers.c

…

printk.c

Merge tag 'driver-core-3.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2012-07-26 11:25:33 -07:00

profile.c

…

ptrace.c

…

range.c

…

rcu.h

…

rcupdate.c

rcu: Consolidate tree/tiny __rcu_read_{,un}lock() implementations

2012-07-02 12:34:23 -07:00

rcutiny_plugin.h

rcu: Fix code-style issues involving "else"

2012-07-06 06:01:48 -07:00

rcutiny.c

rcu: Fix rcu_is_cpu_idle() #ifdef in TINY_RCU

2012-07-02 12:34:25 -07:00

rcutorture.c

rcu: Fix broken strings in RCU's source code.

2012-07-06 06:01:49 -07:00

rcutree_plugin.h

rcu: Fix code-style issues involving "else"

2012-07-06 06:01:48 -07:00

rcutree_trace.c

rcu: Fix broken strings in RCU's source code.

2012-07-06 06:01:49 -07:00

rcutree.c

rcu: Fix code-style issues involving "else"

2012-07-06 06:01:48 -07:00

rcutree.h

Merge branches 'bigrtm.2012.07.04a', 'doctorture.2012.07.02a', 'fixes.2012.07.06a' and 'fnh.2012.07.02a' into HEAD

2012-07-06 05:59:30 -07:00

relay.c

splice: fix racy pipe->buffers uses

2012-06-13 21:16:42 +02:00

res_counter.c

…

resource.c

resources: allow adjust_resource() for resources with no parent

2012-06-13 15:42:22 -06:00

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

…

rtmutex-tester.c

…

rtmutex.c

…

rtmutex.h

…

rwsem.c

…

seccomp.c

…

semaphore.c

…

signal.c

signal: make sure we don't get stopped with pending task_work

2012-07-22 23:57:54 +04:00

smp.c

smp: Remove ipi_call_lock[_irq]()/ipi_call_unlock[_irq]()

2012-06-05 17:27:14 +02:00

smpboot.c

…

smpboot.h

smpboot: Remove leftover declaration

2012-06-11 15:07:52 +02:00

softirq.c

…

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

syscalls, x86: add __NR_kcmp syscall

2012-05-31 17:49:32 -07:00

sys.c

prctl: remove redunant assignment of "error" to zero

2012-07-30 17:25:11 -07:00

sysctl_binary.c

ipv4: Don't add deprecated new binary sysctl value.

2012-06-22 23:02:22 -07:00

sysctl.c

coredump: warn about unsafe suid_dumpable / core_pattern combo

2012-07-30 17:25:11 -07:00

task_work.c

deal with task_work callbacks adding more work

2012-07-22 23:57:57 +04:00

taskstats.c

…

test_kprobes.c

…

time.c

…

timeconst.pl

…

timer.c

timers: Improve get_next_timer_interrupt()

2012-06-06 13:49:02 +02:00

tracepoint.c

…

tsacct.c

…

uid16.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

wait.c

…

watchdog.c

watchdog: Quiet down the boot messages

2012-06-14 12:20:50 +02:00

workqueue_sched.h

…

workqueue.c

workqueue: fix spurious CPU locality WARN from process_one_work()

2012-07-22 10:16:34 -07:00