[patch] Patch

1505_procfs-dumpable-race.patch (text/plain), 634 bytes, created by Tim Yamin (RETIRED) on 2006-07-15 05:45:24 UTC

Index: linux-2.6.16-gentoo-r12/fs/proc/base.c
===================================================================
--- linux-2.6.16-gentoo-r12.orig/fs/proc/base.c
+++ linux-2.6.16-gentoo-r12/fs/proc/base.c
@@ -1367,6 +1367,7 @@ static int pid_revalidate(struct dentry 
 			inode->i_uid = 0;
 			inode->i_gid = 0;
 		}
+		inode->i_mode &= ~(S_ISUID | S_ISGID);
 		security_task_to_inode(task, inode);
 		return 1;
 	}
@@ -1394,6 +1395,7 @@ static int tid_fd_revalidate(struct dent
 				inode->i_uid = 0;
 				inode->i_gid = 0;
 			}
+			inode->i_mode &= ~(S_ISUID | S_ISGID);
 			security_task_to_inode(task, inode);
 			return 1;
 		}