Andreas Kling
37d8faf1b4
ProcFS: Fix /proc/PID/* hardening bypass
...
This enabled trivial ASLR bypass for non-dumpable programs by simply
opening /proc/PID/vm before exec'ing.
We now hold the target process's ptrace lock across the refresh/write
operations, and deny access if the process is non-dumpable. The lock
is necessary to prevent a TOCTOU race on Process::is_dumpable() while
the target is exec'ing.
Fixes #5270 .
2021-02-19 09:46:36 +01:00
..
2021-02-08 18:27:28 +01:00
2021-01-25 18:57:06 +01:00
2021-02-12 13:51:34 +01:00
2021-02-12 11:59:27 +01:00
2020-05-29 07:53:30 +02:00
2020-05-29 07:53:30 +02:00
2021-02-12 16:24:40 +01:00
2021-02-12 16:24:40 +01:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2021-01-26 21:20:00 +01:00
2020-12-31 21:51:00 +01:00
2021-02-13 19:56:49 +01:00
2021-02-12 13:33:58 +01:00
2021-02-15 08:28:57 +01:00
2021-01-03 22:12:19 +01:00
2021-01-25 18:57:06 +01:00
2021-01-25 18:57:06 +01:00
2020-07-05 12:26:27 +02:00
2020-07-05 12:26:27 +02:00
2021-02-12 10:26:29 +01:00
2021-02-13 00:40:31 +01:00
2020-08-25 09:48:48 +02:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2021-02-08 18:27:28 +01:00
2021-01-30 22:54:51 +01:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2020-12-14 23:05:53 +01:00
2021-01-20 23:20:02 +01:00
2021-02-12 10:26:29 +01:00
2021-02-19 09:46:36 +01:00
2021-02-19 09:46:36 +01:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2021-02-12 10:26:29 +01:00
2020-12-26 11:54:54 +01:00