From 1de3edce9f33b2555d27cbe50bbafe734085eeab Mon Sep 17 00:00:00 2001 From: Chris Wright Date: Wed, 5 Oct 2005 14:34:16 -0700 Subject: [PATCH] Add module_param permissions fix, fwd from Dave Airlie --- queue/drm-module_param-permissions-fix.patch | 34 ++++++++++++++++++++ queue/series | 1 + 2 files changed, 35 insertions(+) create mode 100644 queue/drm-module_param-permissions-fix.patch diff --git a/queue/drm-module_param-permissions-fix.patch b/queue/drm-module_param-permissions-fix.patch new file mode 100644 index 00000000000..74fb4e052fc --- /dev/null +++ b/queue/drm-module_param-permissions-fix.patch @@ -0,0 +1,34 @@ +From stable-bounces@linux.kernel.org Wed Oct 5 13:47:18 2005 +Date: Thu, 6 Oct 2005 06:46:50 +1000 +From: Dave Airlie +To: stable@linux.kernel.org +Subject: [stable] Fwd: [vendor-sec] [Fwd: [PATCH] sysfs: Signedness problem] +Reply-To: Dave Airlie + +From: Dave Jones + +Please consider for next 2.6.13, it is a minor security issue allowing +users to turn on drm debugging when they shouldn't... + +This fell through the cracks. Until Josh pointed me at +http://bugs.gentoo.org/show_bug.cgi?id=107893 + +Signed-off-by: Chris Wright +--- + + drivers/char/drm/drm_stub.c | 2 +- + 1 files changed, 1 insertion(+), 1 deletion(-) + +Index: linux-2.6.13.y/drivers/char/drm/drm_stub.c +=================================================================== +--- linux-2.6.13.y.orig/drivers/char/drm/drm_stub.c ++++ linux-2.6.13.y/drivers/char/drm/drm_stub.c +@@ -47,7 +47,7 @@ MODULE_PARM_DESC(cards_limit, "Maximum n + MODULE_PARM_DESC(debug, "Enable debug output"); + + module_param_named(cards_limit, drm_cards_limit, int, 0444); +-module_param_named(debug, drm_debug, int, 0666); ++module_param_named(debug, drm_debug, int, 0600); + + drm_head_t **drm_heads; + struct drm_sysfs_class *drm_class; diff --git a/queue/series b/queue/series index d52b4c4bf43..a6e9b53c297 100644 --- a/queue/series +++ b/queue/series @@ -1,3 +1,4 @@ ieee1394-sbp2-fixes-for-hot-unplug-and-module-unloading.patch orinoco-info-leak.patch tcp-congestion-control-bug.patch +drm-module_param-permissions-fix.patch -- 2.47.3