Re: PATCH: proc_do_stop and rpctrace

Marcus Brinkmann <[email protected]> Fri, 15 Aug 2003 23:14:39 +0200
Newsgroups gmane.os.hurd.devel.readers
Message-ID <[email protected]>
On Sat, Aug 09, 2003 at 05:33:29PM -0400, Roland McGrath wrote:
> The concern I have about this patch per se is proc calling thread_resume on
> a random port from the user.  This is at least a DoS opportunity.  It also
> points to a more general problem rpctrace has--servers make comparisons
> between ports from the user (rpctrace) and ports outside rpctrace's sphere
> of interposition.  I bet "rpctrace ln foo bar" (dir_link) gets EXDEV too.

Shall I revert the patch?

Thanks,
Marcus

-- 
`Rhubarb is no Egyptian god.' GNU      http://www.gnu.org    [email protected]
Marcus Brinkmann              The Hurd http://www.gnu.org/software/hurd/
[email protected]
http://www.marcus-brinkmann.de/