You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Alan Cox 5f78e89b5f [SCSI] aacraid: fix security weakness ... Actually there are several but one is trivially fixed 1. FSACTL_GET_NEXT_ADAPTER_FIB ioctl does not lock dev->fib_list but needs to 2. Ditto for FSACTL_CLOSE_GET_ADAPTER_FIB 3. It is possible to construct an attack via the SRB ioctls where the user obtains assorted elevated privileges. Various approaches are possible, the trivial ones being things like writing to the raw media via scsi commands and the swap image of other executing programs with higher privileges. So the ioctls should be CAP_SYS_RAWIO - at least all the FIB manipulating ones. This is a bandaid fix for #3 but probably the ioctls should grow their own capable checks. The other two bugs need someone competent in that driver to fix them. Signed-off-by: Alan Cox <alan@redhat.com> Acked-by: Mark Salyzyn <mark_salyzyn@adaptec.com> Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>		17 years ago
..
Makefile	…
TODO	…
aachba.c	[SG] Update drivers to use sg helpers	18 years ago
aacraid.h	Fix misspellings of "system", "controller", "interrupt" and "necessary".	18 years ago
commctrl.c	fix abuses of ptrdiff_t	18 years ago
comminit.c	fix abuses of ptrdiff_t	18 years ago
commsup.c	[SCSI] aacraid: fix up le32 issues in BlinkLED	18 years ago
dpcsup.c	fix abuses of ptrdiff_t	18 years ago
linit.c	[SCSI] aacraid: fix security weakness	17 years ago
nark.c	…
rkt.c	…
rx.c	…
sa.c	…