Re: [PATCH 1/2] um: Set secure access mode for temporary file

2015-11-28 Thread Mickaël Salaün
On 28/11/2015 23:55, Richard Weinberger wrote: > Am 28.11.2015 um 23:52 schrieb Mickaël Salaün: >> >> On 28/11/2015 22:40, Richard Weinberger wrote: >>> Am 28.11.2015 um 22:32 schrieb Mickaël Salaün: Replace the default insecure mode 0777 with 0700 for temporary file. Prohibit othe

Re: [PATCH 1/2] um: Set secure access mode for temporary file

2015-11-28 Thread Richard Weinberger
Am 29.11.2015 um 00:00 schrieb Mickaël Salaün: > > > On 28/11/2015 23:55, Richard Weinberger wrote: >> Am 28.11.2015 um 23:52 schrieb Mickaël Salaün: >>> >>> On 28/11/2015 22:40, Richard Weinberger wrote: Am 28.11.2015 um 22:32 schrieb Mickaël Salaün: > Replace the default insecure mode

Re: [PATCH 1/2] um: Set secure access mode for temporary file

2015-11-28 Thread Richard Weinberger
Am 28.11.2015 um 23:52 schrieb Mickaël Salaün: > > On 28/11/2015 22:40, Richard Weinberger wrote: >> Am 28.11.2015 um 22:32 schrieb Mickaël Salaün: >>> Replace the default insecure mode 0777 with 0700 for temporary file. >>> >>> Prohibit other users to change the executable mapped code. >> >> Hmm,

Re: [PATCH 1/2] um: Set secure access mode for temporary file

2015-11-28 Thread Mickaël Salaün
On 28/11/2015 22:40, Richard Weinberger wrote: > Am 28.11.2015 um 22:32 schrieb Mickaël Salaün: >> Replace the default insecure mode 0777 with 0700 for temporary file. >> >> Prohibit other users to change the executable mapped code. > > Hmm, isn't the tmp file already unlinked at this stage? >

[PATCH 1/2] um: Set secure access mode for temporary file

2015-11-28 Thread Mickaël Salaün
Replace the default insecure mode 0777 with 0700 for temporary file. Prohibit other users to change the executable mapped code. Signed-off-by: Mickaël Salaün --- arch/um/os-Linux/mem.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/um/os-Linux/mem.c b/arch/um/os-Linux/

Re: [PATCH 1/2] um: Set secure access mode for temporary file

2015-11-28 Thread Richard Weinberger
Am 28.11.2015 um 22:32 schrieb Mickaël Salaün: > Replace the default insecure mode 0777 with 0700 for temporary file. > > Prohibit other users to change the executable mapped code. Hmm, isn't the tmp file already unlinked at this stage? Thanks, //richard -- To unsubscribe from this list: send th