[Patch] Fixing the PROCESS_DUP_HANDLE security hole.

2004-11-11 Thread Pierre A. Humblet
Now that 1.5.12 is out, here is a patch to fix the PROCESS_DUP_HANDLE security hole. It uses a new approach to reparenting: the parent duplicates the exec'ed process handle when signaled by the child. It also handles correctly the case of a quick re-exec (2 simultaneous reparenting), which is

Re: [Patch] Fixing the PROCESS_DUP_HANDLE security hole.

2004-11-11 Thread Christopher Faylor
On Thu, Nov 11, 2004 at 10:48:57PM -0500, Pierre A. Humblet wrote: P.S.: I have no news about the recent patch to /bin/kill -f That is because I was sure that I'd used 'kill -f' to kill windows pids in the past and wanted to check your patch. I haven't been near a WinMe system in a while,

Re: [Patch] Fixing the PROCESS_DUP_HANDLE security hole.

2004-11-11 Thread Christopher Faylor
On Thu, Nov 11, 2004 at 10:48:57PM -0500, Pierre A. Humblet wrote: Now that 1.5.12 is out, here is a patch to fix the PROCESS_DUP_HANDLE security hole. It uses a new approach to reparenting: the parent duplicates the exec'ed process handle when signaled by the child. Can you refresh my memory (a

Re: [Patch] Fixing the PROCESS_DUP_HANDLE security hole.

2004-11-11 Thread Pierre A. Humblet
At 11:24 PM 11/11/2004 -0500, Christopher Faylor wrote: On Thu, Nov 11, 2004 at 10:48:57PM -0500, Pierre A. Humblet wrote: P.S.: I have no news about the recent patch to /bin/kill -f That is because I was sure that I'd used 'kill -f' to kill windows pids in the past and wanted to check your

Re: [Patch] Fixing the PROCESS_DUP_HANDLE security hole.

2004-11-11 Thread Christopher Faylor
On Thu, Nov 11, 2004 at 11:36:32PM -0500, Pierre A. Humblet wrote: At 11:24 PM 11/11/2004 -0500, Christopher Faylor wrote: On Thu, Nov 11, 2004 at 10:48:57PM -0500, Pierre A. Humblet wrote: P.S.: I have no news about the recent patch to /bin/kill -f That is because I was sure that I'd used 'kill

Re: [Patch] Fixing the PROCESS_DUP_HANDLE security hole.

2004-11-11 Thread Pierre A. Humblet
At 11:33 PM 11/11/2004 -0500, Christopher Faylor wrote: On Thu, Nov 11, 2004 at 10:48:57PM -0500, Pierre A. Humblet wrote: Now that 1.5.12 is out, here is a patch to fix the PROCESS_DUP_HANDLE security hole. It uses a new approach to reparenting: the parent duplicates the exec'ed process handle