Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability
On Fri, 17 Aug 2007, Nicolas Rachinsky wrote:
> * Dan Yefimov <dan@xxxxxxxxxxxxxxxxxxxxx> [2007-08-17 05:27 +0400]:
> > BTW, SIGKILL and SIGSTOP can be issued by an O_ASYNC file I/O also (look in
> > fcntl(2) at F_SETSIG section). If you use F_SETSIG for sending SIGKILL or
> > SIGSTOP, there's nothing to be done with that - that behaviour is well
>
> Looking in that man page I see:
> F_GETSIG and F_SETSIG are Linux-specific.
>
And we consider Linux too. But anyway, they're unexploitable since signals set
with F_SETSIG are subject to usual permission checks.
--
Sincerely Your, Dan.