]> git.ipfire.org Git - thirdparty/systemd.git/commit
chown-recursive: let's rework the recursive logic to use O_PATH
authorLennart Poettering <lennart@poettering.net>
Fri, 19 Oct 2018 09:26:59 +0000 (11:26 +0200)
committerLukáš Nykrýn <lnykryn@redhat.com>
Tue, 4 Dec 2018 12:40:26 +0000 (13:40 +0100)
commit107d75ca9394481bd045385fc45f2ee65b30ad16
tree829f762d42d72354b47654315998d28aeadf978f
parent55798355455b9255458d6a705f8766c4dbe3ef73
chown-recursive: let's rework the recursive logic to use O_PATH

That way we can pin a specific inode and analyze it and manipulate it
without it being swapped out beneath our hands.

Fixes a vulnerability originally found by Jann Horn from Google.

CVE-2018-15687
LP: #1796692
https://bugzilla.redhat.com/show_bug.cgi?id=1639076

(cherry-picked from commit 5de6cce58b3e8b79239b6e83653459d91af6e57c)

Resolves: #1643368
src/core/chown-recursive.c