Bug 241609
Summary: | fexecve() fails after calling setuid() or seteuid() | ||||||
---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Rennie deGraaf <degraaf> | ||||
Component: | kernel | Assignee: | Kernel Maintainer List <kernel-maint> | ||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | Brian Brock <bbrock> | ||||
Severity: | medium | Docs Contact: | |||||
Priority: | medium | ||||||
Version: | 5 | CC: | drepper | ||||
Target Milestone: | --- | ||||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | 2.6.22.1-41 | Doc Type: | Bug Fix | ||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2007-08-20 22:35:25 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Rennie deGraaf
2007-05-28 21:12:18 UTC
Created attachment 155559 [details]
A program that demonstrates the bug.
Then why are you filling that against glibc? (In reply to comment #2) > Then why are you filling that against glibc? Because fexecve() is currently implemented there. At the very least, this issue should be added to the glibc documentation as a known bug, and the glibc wrapper will need to be fixed when a better solution becomes available. There is also a possibility that the glibc gurus can come up with a better way of implementing fexecve() in userspace. The kernel bug is that fexecve() isn't implemented, not that it doesn't work properly. I just discovered that a patch was added to the kernel as of 2.6.22-rc1 that allows access to /proc/self/fd/ by programs that have called setuid(). This may solve this issue; I don't currently have a system lying around that I want to test a pre-release kernel on. This is exclusively a kernel issue and is at least in F7 fixed. |