Bug 107893 – sysfs world writable file: /sys/module/drm/parameters/debug

• Product: Gentoo Security
• Status: RESOLVED INVALID

[Description adr 2005-10-02 06:41:49 UTC]

Hi, 
 
I found a world writable file in sysfs. Maybe this is not very cool... (?). 
 
# ls -al /sys/module/drm/parameters 
total 0 
drwxr-xr-x  2 root root    0 Oct  2 14:42 . 
drwxr-xr-x  3 root root    0 Oct  2 07:14 .. 
-r--r--r--  1 root root 4096 Oct  2 14:42 cards_limit 
-rw-rw-rw-  1 root root 4096 Oct  2 14:42 debug 
 
 
I'm not an expert, so I don't know where it comes from. To me it looks a 
kernel thing. I'm using gentoo-sources-2.6.12-r10. 
 

Reproducible: Always
Steps to Reproduce:
1. 
2. 
3.

[Comment 1 Thierry Carrez (RETIRED) 2005-10-11 01:30:04 UTC]

Here is the patch :
http://www.kernel.org/hg/linux-2.6/?cmd=changeset;node=d7067d7d1f92cba14963a430cfbd53098cbbc8fd

[Comment 2 adr 2005-10-11 02:22:50 UTC]

(In reply to comment #1) 
> Here is the patch : 
> 
http://www.kernel.org/hg/linux-2.6/?cmd=changeset;node=d7067d7d1f92cba14963a430cfbd53098cbbc8fd 
 
Should be used for the Gentoo x11-base/x11-drm ebuilds as well... 

[Comment 3 Tim Yamin (RETIRED) 2005-11-26 08:53:53 UTC]

This only enables extra printk's so I don't think it's a security risk - no DoS
condition is caused either so I'm closing this INVALID. Thanks for the report
anyway!