Andreas Kling
37d8faf1b4
ProcFS: Fix /proc/PID/* hardening bypass
...
This enabled trivial ASLR bypass for non-dumpable programs by simply
opening /proc/PID/vm before exec'ing.
We now hold the target process's ptrace lock across the refresh/write
operations, and deny access if the process is non-dumpable. The lock
is necessary to prevent a TOCTOU race on Process::is_dumpable() while
the target is exec'ing.
Fixes #5270 .
2021-02-19 09:46:36 +01:00
..
2021-02-08 18:08:55 +01:00
2021-02-15 19:37:14 +01:00
2021-02-17 16:33:43 +01:00
2021-02-17 16:30:55 +01:00
2021-02-19 09:46:36 +01:00
2021-02-14 18:12:00 +01:00
2021-02-15 15:25:23 +01:00
2021-02-17 14:41:36 +01:00
2021-02-17 16:30:55 +01:00
2021-02-14 10:01:50 +01:00
2021-02-18 18:04:58 +01:00
2021-02-15 08:28:57 +01:00
2021-02-08 18:08:55 +01:00
2021-02-17 16:37:11 +01:00
2021-02-15 15:25:23 +01:00
2021-01-30 09:18:46 +01:00
2021-02-15 11:41:53 +01:00
2021-02-15 11:41:53 +01:00
2021-02-15 17:32:56 +01:00
2021-01-22 22:17:39 +01:00
2021-02-08 19:34:41 +01:00
2021-02-05 09:35:02 +01:00
2021-02-01 17:13:23 +01:00
2021-02-01 17:13:23 +01:00
2021-02-08 18:27:28 +01:00
2021-02-08 18:08:55 +01:00
2021-02-14 18:12:00 +01:00
2021-02-15 09:34:52 +01:00
2021-02-14 10:01:50 +01:00
2021-02-09 19:18:13 +01:00
2021-02-17 16:33:43 +01:00
2021-02-15 09:34:52 +01:00
2021-02-17 16:33:43 +01:00
2021-02-03 11:17:47 +01:00
2021-02-14 18:11:32 +01:00
2021-02-15 08:28:57 +01:00
2021-02-15 09:34:52 +01:00
2021-01-22 22:17:39 +01:00
2021-02-14 09:36:58 +01:00
2021-02-14 09:36:58 +01:00
2021-02-08 18:27:28 +01:00
2021-02-15 09:34:52 +01:00
2021-02-14 18:12:00 +01:00
2021-02-18 09:37:33 +01:00
2021-02-15 08:28:57 +01:00
2021-02-05 21:28:06 +01:00
2021-02-11 20:58:39 +01:00
2021-02-14 18:12:00 +01:00
2021-02-07 20:45:09 +01:00
2021-02-13 00:40:31 +01:00
2021-02-15 09:34:52 +01:00
2021-02-14 11:47:14 +01:00
2021-02-14 18:12:00 +01:00
2021-02-15 08:28:57 +01:00
2021-02-08 18:08:55 +01:00
2021-02-08 19:34:41 +01:00
2021-02-11 20:58:01 +01:00
2021-02-11 20:58:01 +01:00
2021-02-15 17:32:56 +01:00
2021-02-15 09:34:52 +01:00
2021-02-15 09:34:52 +01:00
2021-02-08 18:08:55 +01:00
2021-02-15 08:28:57 +01:00