summaryrefslogtreecommitdiff
path: root/utils
diff options
context:
space:
mode:
authorSergey Bugaev <bugaevc@gmail.com>2021-05-29 17:56:38 +0300
committerSamuel Thibault <samuel.thibault@ens-lyon.org>2022-08-10 22:15:20 +0200
commitffead1cbcaa1db5db525403043e27d618af8752b (patch)
tree1ec345c657e4d4b71e006f6eaef06b5bfc3b68a8 /utils
parent281396c87082d7d09a651c5f614cf3767dcc15e3 (diff)
libshouldbeinlibc: Do not reauthenticate proc port when secure
exec_reauth () is supposed to reauthenticate the given ports and file descriptors with a new authentication. If the secure flag is set, this reauthentication is happening for a future exec with the EXEC_SECURE flag. Now that the exec server uses proc_reauthenticate_reassign (), the process reauthentication is done atomically with task reassignment by the exec server. So stop doing it inside exec_reauth (). This fixes a vulnerability where a process was able to use its reauthenticated proc port before it got exec'ed over.
Diffstat (limited to 'utils')
0 files changed, 0 insertions, 0 deletions