[patch] 2.4 kernel sys_chown exploit patch

2.4-chown_exploit.patch (text/plain), 659 bytes, created by Chris White (RETIRED) on 2004-07-08 17:14:12 UTC

# This is a BitKeeper generated diff -Nru style patch.
#
# ChangeSet
#   2004/07/03 18:32:40-03:00 [e-mail] 
#     Thomas Biege: Fix missing DAC check on sys_chown
# 
# fs/attr.c
#   2004/07/03 18:28:30-03:00 [e-mail] +1 -0
#   Thomas Biege: Fix missing DAC check on sys_chown
# 
diff -Nru a/fs/attr.c b/fs/attr.c
--- a/fs/attr.c	2004-07-08 17:05:20 -07:00
+++ b/fs/attr.c	2004-07-08 17:05:20 -07:00
@@ -33,6 +33,7 @@
 
 	/* Make sure caller can chgrp. */
 	if ((ia_valid & ATTR_GID) &&
+	    (current->fsuid != inode->i_uid ||
 	    (!in_group_p(attr->ia_gid) && attr->ia_gid != inode->i_gid) &&
 	    !capable(CAP_CHOWN))
 		goto error;