Toward race-free process signaling

Posted Dec 6, 2018 22:05 UTC (Thu) by luto (subscriber, #39314)
In reply to: Toward race-free process signaling by nopsled
Parent article: Toward race-free process signaling

I suggested roughly what you’re suggesting, and it got shot down. The problem is that a capability to manipulate a process that survives execve is problematic without NO_NEW_PRIVS.

to post comments

Toward race-free process signaling

Posted Dec 6, 2018 22:37 UTC (Thu) by quotemstr (subscriber, #45331) [Link] (1 responses)

Can you elaborate? It's not immediately clear to me how NO_NEW_PRIVS matters.

Toward race-free process signaling

Posted Dec 15, 2018 20:09 UTC (Sat) by droundy (guest, #4559) [Link]

I presume the idea is that I fork and get a kill fd. Then I execve a suid executable and now I can send signals to a root process, unless something were done to prevent the suid bit from having effect, or that would invalidate my kill fd.