오픈 소스 소프트웨어 개발 및 다운로드
로그인
계정 만들기
도움
내 OSDN
브라 우즈 소프트웨어
Magazine
소프트웨어 개발
Pastebin
Software
People
PersonalForge
Magazine
Wiki
OSDN
>
찾기 소프트웨어
>
TOMOYO
TOMOYO
요약
Project Summary
Developer Dashboard
Project Reviews
웹 페이지
Developers
List of RSS Feeds
Statistics
History
Image Gallery
Search Keywords
뉴스
Listed News
도움
다운로드
List of Releases
도움
소스 코드
Guide
Browse SVN
Browse Git: tomoyo-test1
도움
Wiki
FrontPage
Title index
Recent changes
Wiki Search
도움
워드 프로세서
List Docs
도움
포럼
List of Forums
Open Discussion (112)
도움
목록
list of ML
tomoyo-dev
tomoyo-dev-en
tomoyo-users
tomoyo-users-en
도움
티켓
Ticket List
Milestone List
Type List
Component List
List of frequently used tickets/RSS
Submit New Ticket
도움
Browse Subversion Repository
/
[tomoyo]
/
trunk
/
1.8.x
/
ccs-patch
/
README.ccs
Diff of /trunk/1.8.x/ccs-patch/README.ccs
Parent Directory
|
Revision Log
|
Patch
revision
964
by
kumaneko
, Tue Feb 5 04:56:40 2008 UTC
revision
987
by
kumaneko
, Thu Feb 14 08:30:47 2008 UTC
#
Line 1164
Fix 2008/02/05
Line 1164
Fix 2008/02/05
1164
Kernel 2.6.24 introduced PID namespace.
Kernel 2.6.24 introduced PID namespace.
1165
To search PID given from userland, the kernel needs to use
To search PID given from userland, the kernel needs to use
1166
find_task_by_vpid() instead of find_task_pid().
find_task_by_vpid() instead of find_task_pid().
1167
1168
Fix 2008/02/14
1169
1170
@ Add execve() parameter checking.
1171
1172
Until now, it was impossible to check argv[] and envp[] parameters
1173
passed to execve().
1174
I expanded conditional permission syntax so that
1175
{ argc, envc, argv[] , envp[] } parameters can be checked if needed.
1176
This will allow administrator permit execution of /bin/sh only when
1177
/bin/sh is invoked in the form of "/bin/sh -c" and environment variable
1178
HOME is set by specifying
1179
1180
allow_execute /bin/sh if exec.argv[1]="-c" exec.envp["HOME"]!=NULL
1181
1182
in the policy.
1183
This extension will make exploit codes difficult to start /bin/sh because
1184
they unlikely set up environment variables and unlikely specify "-c"
1185
option when invoking /bin/sh , whereas proper functions likely set up
1186
environment variables and likely specify "-c" option.
Colored Diff
Long Colored Diff
Full Colored Diff
Unidiff
Context Diff
Side by Side
Legend:
Removed from v.964
changed lines
Added in v.987
Back to OSDN
">
Back to OSDN
ViewVC Help
Powered by
ViewVC 1.1.26