Re: Fix for CVE-2011-0401

2011-04-01 Thread Kenneth R Westerback
Excellent! I've waited an entire year for this diff! ok krw@. Ken On Fri, Apr 01, 2011 at 10:47:51PM +, Miod Vallat wrote: > Tentative fix, mostly by beck@. Would need some IPv6 tests of course. > > Index: sys/ufs/ufs/ufs_vnops.c > ===

Re: Fix for CVE-2011-0401

2011-04-01 Thread Philip Guenther
On Fri, Apr 1, 2011 at 3:47 PM, Miod Vallat wrote: > Tentative fix, mostly by beck@. Would need some IPv6 tests of course. > +int > +vnode_policy_enforce(struct componentname *cnp, struct proc *p) { > + int i = 0; > + if (strcmp(p->p_p->ps_pptr->ps_mainproc->p_comm, "scp") != 0) { > +

Re: Fix for CVE-2011-0401

2011-04-01 Thread Matthew Dempsky
CVE-2011-0401 appears to be about Piwiki... is this the right CVE number? http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0401

Fix for CVE-2011-0401

2011-04-01 Thread Miod Vallat
Tentative fix, mostly by beck@. Would need some IPv6 tests of course. Index: sys/ufs/ufs/ufs_vnops.c === RCS file: /cvs/src/sys/ufs/ufs/ufs_vnops.c,v retrieving revision 1.97 diff -u -r1.97 ufs_vnops.c --- sys/ufs/ufs/ufs_vnops.c