16 ms·
> it's still possible for a user to open arbitrary file for writing with root privileges, which is bad. It appears that way at first, but: O_WRONLY mode will n
by avian 9y ago
> it's still possible for a user to open arbitrary file for writing with root privileges, which is bad.
It appears that way at first, but: O_WRONLY mode will not create a new file, so you can't make files as root. If you open an existing file, it will fail later on the console device-specific ioctl. If that's the catch here, it does not seem trivial to exploit.
- justincormack 9y agoNot all the legacy ioctls are single device only.
- deleted 9y ago[deleted]
- jwilk 9y agoYeah, you can't create new files that way; but opening an existing file can have side effects (think of tape devices or named pipes).