Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 107893 - sysfs world writable file: /sys/module/drm/parameters/debug
Summary: sysfs world writable file: /sys/module/drm/parameters/debug
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: [2.6 < 2.6.13.4]
Keywords:
Depends on:
Blocks:
 
Reported: 2005-10-02 06:41 UTC by adr
Modified: 2005-11-26 08:53 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description adr 2005-10-02 06:41:49 UTC
Hi, 
 
I found a world writable file in sysfs. Maybe this is not very cool... (?). 
 
# ls -al /sys/module/drm/parameters 
total 0 
drwxr-xr-x  2 root root    0 Oct  2 14:42 . 
drwxr-xr-x  3 root root    0 Oct  2 07:14 .. 
-r--r--r--  1 root root 4096 Oct  2 14:42 cards_limit 
-rw-rw-rw-  1 root root 4096 Oct  2 14:42 debug 
 
 
I'm not an expert, so I don't know where it comes from. To me it looks a 
kernel thing. I'm using gentoo-sources-2.6.12-r10. 
 

Reproducible: Always
Steps to Reproduce:
1. 
2. 
3.
Comment 1 Thierry Carrez (RETIRED) gentoo-dev 2005-10-11 01:30:04 UTC
Here is the patch :
http://www.kernel.org/hg/linux-2.6/?cmd=changeset;node=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
Comment 2 adr 2005-10-11 02:22:50 UTC
(In reply to comment #1) 
> Here is the patch : 
> 
http://www.kernel.org/hg/linux-2.6/?cmd=changeset;node=d7067d7d1f92cba14963a430cfbd53098cbbc8fd 
 
Should be used for the Gentoo x11-base/x11-drm ebuilds as well... 
Comment 3 Tim Yamin (RETIRED) gentoo-dev 2005-11-26 08:53:53 UTC
This only enables extra printk's so I don't think it's a security risk - no DoS
condition is caused either so I'm closing this INVALID. Thanks for the report
anyway!