[LUG.ro] Una vulneabilidad del kernel no resuelta...

Gustavo Guillermo Pérez lugro@lugro.org.ar
Thu, 29 Dec 2005 16:50:24 -0600


Creo que ya fue resuelto, eso espero, que velocidad la de la "comunidad" 
respecto a la de otros OSes.
:P

Fwd: [PATCH] SECURITY,VFS,2.4: local denial-of-service with file lease

----------  Mensaje reenviado  ----------

Subject: [PATCH] SECURITY,VFS,2.4: local denial-of-service with file lease
Date: Lunes, 19 de Diciembre de 2005 04:16
From: Horms <horms@verge.net.au>
To: Linux kernel <linux-kernel@vger.kernel.org>
Cc: Marcelo Tosatti <marcelo.tosatti@cyclades.com>

    [PATCH] VFS: local denial-of-service with file leases

    Remove time_out_leases() printk that's easily triggered by users.

    Signed-off-by: Chris Wright <chrisw@osdl.org>
    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

    Above is the signoff information for
    f3a9388e4ebea57583272007311fffa26ebbb305 included in Linus's 2.6 tree.
    As this is CVE-2005-3857 I am proposing its inclusion in 2.4

    Signed-off-by: Horms <horms@verge.net.au>

diff --git a/fs/locks.c b/fs/locks.c
index 370ed4c..2f21d25 100644
--- a/fs/locks.c
+++ b/fs/locks.c
@@ -1087,7 +1087,6 @@ static void time_out_leases(struct inode
 			before = &fl->fl_next;
 			continue;
 		}
-		printk(KERN_INFO "lease broken - owner pid = %d\n", fl->fl_pid);
 		lease_modify(before, fl->fl_type & ~F_INPROGRESS);
 		if (fl == *before)	/* lease_modify may have freed fl */
 			before = &fl->fl_next;
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

-------------------------------------------------------

-- 
Gustavo Guillermo Pérez
Compunauta uLinux
www.compunauta.com