Hello!

DRI CVS still has the problem which was fixed in the mainline kernel
long ago:

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c0758146adbe39514e75ac860ce7e49f865c2297
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3179

This patch fixes it in the same way (the code in DRI CVS uses symbolic
identifiers instead of raw 0666/0600 file modes):

=======================================================================

--- drm/linux-core/drm_stub.c.debug-rights      2006-01-03 20:02:11 +0300
+++ drm/linux-core/drm_stub.c   2006-01-03 20:18:39 +0300
@@ -48,7 +48,7 @@ MODULE_PARM_DESC(cards_limit, "Maximum n
 MODULE_PARM_DESC(debug, "Enable debug output");
 
 module_param_named(cards_limit, drm_cards_limit, int, S_IRUGO);
-module_param_named(debug, drm_debug, int, S_IRUGO|S_IWUGO);
+module_param_named(debug, drm_debug, int, S_IRUSR|S_IWUSR);
 
 drm_head_t **drm_heads;
 struct drm_sysfs_class *drm_class;


-- 
Sergey Vlasov

Attachment: pgprcWBdp6qk1.pgp
Description: PGP signature

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
_______________________________________________
Dri-devel mailing list
Dri-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dri-devel

Reply via email to