From: Rob Bradford Subject: [PATCH] Backported critical security fix from 2.6.17.4 Date: Thu, 13 Jul 2006 15:54:09 +0200 Message-ID: <1152798849.5680.25.camel@localhost.localdomain> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-z/7KLl3PYyF2RqK3cBNZ" Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: xen-devel@lists.xensource.com List-Id: xen-devel@lists.xenproject.org --=-z/7KLl3PYyF2RqK3cBNZ Content-Type: text/plain Content-Transfer-Encoding: 7bit Backported fix from 2.6.17.4 for "fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)" For xen-3.0-testing repository. Cheers, Rob -- Rob Bradford --=-z/7KLl3PYyF2RqK3cBNZ Content-Disposition: attachment; filename=prctl-escalation-backport Content-Type: text/plain; name=prctl-escalation-backport; charset=UTF-8 Content-Transfer-Encoding: 7bit # HG changeset patch # User rob@host02-tlabs-berlin.deploy.xenoserver.org # Node ID 3d1dddefa2aed42c287186dc09bde89aa0a08cf8 # Parent 1e225598ce827a8d810ad57e82547ad6ed9c0258 Backported fix from 2.6.17.4 for "fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)" Signed-off-by: Rob Bradford diff -r 1e225598ce82 -r 3d1dddefa2ae patches/linux-2.6.16.13/fix-prctl-escalation.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/patches/linux-2.6.16.13/fix-prctl-escalation.patch Thu Jul 13 13:20:22 2006 +0100 @@ -0,0 +1,12 @@ +diff -ru ../pristine-linux-2.6.16.13/kernel/sys.c./kernel/sys.c +--- ../pristine-linux-2.6.16.13/kernel/sys.c 2006-07-13 13:01:03.000000000 +0100 ++++ ./kernel/sys.c 2006-07-13 13:01:39.000000000 +0100 +@@ -1802,7 +1802,7 @@ + error = current->mm->dumpable; + break; + case PR_SET_DUMPABLE: +- if (arg2 < 0 || arg2 > 2) { ++ if (arg2 < 0 || arg2 > 1) { + error = -EINVAL; + break; + } --=-z/7KLl3PYyF2RqK3cBNZ Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel --=-z/7KLl3PYyF2RqK3cBNZ--