Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87edaey7ni.fsf@dell.be.48ers.dk>
Date: Mon, 06 May 2024 23:04:01 +0200
From: Peter Korsgaard <peter@...sgaard.com>
To: Ben Hutchings via buildroot <buildroot@...ldroot.org>
Cc: Ben Hutchings <ben.hutchings@...d.be>,  oss-security@...ts.openwall.com
Subject: Re: [PATCH] package/skeleton-init-sysv: Set sticky bit on /dev/shm

>>>>> "Ben" == Ben Hutchings via buildroot <buildroot@...ldroot.org> writes:

 > /dev/shm is a world-writable directory, like /tmp, and should also
 > have the sticky bit set.  Without this, any user can delete and
 > replace another user's files in /dev/shm.

 > This bug has been present since /dev/shm was added to the skeleton
 > /etc/fstab, but appears to have been fixed for systems using systemd
 > by commit 76fc9275f14e "system: separate sysv and systemd parts of the
 > skeleton" which went into Buildroot 2017.08.

 > Signed-off-by: Ben Hutchings <ben.hutchings@...d.be>
 > Fixes: 22fde22e35f98f7830c2f8955465532328348cd1

Committed to 2024.02.x, thanks.

-- 
Bye, Peter Korsgaard

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.