[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87edaey7ni.fsf@dell.be.48ers.dk>
Date: Mon, 06 May 2024 23:04:01 +0200
From: Peter Korsgaard <peter@...sgaard.com>
To: Ben Hutchings via buildroot <buildroot@...ldroot.org>
Cc: Ben Hutchings <ben.hutchings@...d.be>, oss-security@...ts.openwall.com
Subject: Re: [PATCH] package/skeleton-init-sysv: Set sticky bit on /dev/shm
>>>>> "Ben" == Ben Hutchings via buildroot <buildroot@...ldroot.org> writes:
> /dev/shm is a world-writable directory, like /tmp, and should also
> have the sticky bit set. Without this, any user can delete and
> replace another user's files in /dev/shm.
> This bug has been present since /dev/shm was added to the skeleton
> /etc/fstab, but appears to have been fixed for systems using systemd
> by commit 76fc9275f14e "system: separate sysv and systemd parts of the
> skeleton" which went into Buildroot 2017.08.
> Signed-off-by: Ben Hutchings <ben.hutchings@...d.be>
> Fixes: 22fde22e35f98f7830c2f8955465532328348cd1
Committed to 2024.02.x, thanks.
--
Bye, Peter Korsgaard
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
