mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-24 06:31:02 +00:00
Code Issues Wiki Activity

Fixed grsec-path.patch

Browse source
This commit is contained in:
Remy Goldschmidt 2015-03-29 13:15:31 -04:00
parent ba4f29aee6
commit d68e248418
1 changed files with 10 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
pkgs/os-specific/linux/kernel/grsec-path.patch
View file

@ -1,17 +1,18 @@
diff --git a/kernel/kmod.c b/kernel/kmod.c
index 67f7981..03f127d 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -246,9 +246,9 @@ static int ____call_usermodehelper(void *data)
diff --git a/a/kernel/kmod.c b/b/kernel/kmod.c
index a26e825..29baec1 100644
--- a/a/kernel/kmod.c
+++ b/b/kernel/kmod.c
@@ -294,10 +294,9 @@ static int ____call_usermodehelper(void *data)
out the path to be used prior to this point and are now operating
on that copy
*/
- if ((strncmp(sub_info->path, "/sbin/", 6) && strncmp(sub_info->path, "/usr/lib/", 9) &&
- strncmp(sub_info->path, "/lib/", 5) && strncmp(sub_info->path, "/lib64/", 7) &&
- strncmp(sub_info->path, "/usr/libexec/", 13) &&
- strcmp(sub_info->path, "/usr/share/apport/apport")) || strstr(sub_info->path, "..")) {
+ if ((strncmp(sub_info->path, "/sbin/", 6) && strncmp(sub_info->path, "/nix/store/", 11) &&
+ strncmp(sub_info->path, "/run/current-system/systemd/lib/", 32)) ||
+ strstr(sub_info->path, "..")) {
+ if ((strncmp(sub_info->path, "/sbin/", 6) && strncmp(sub_info->path, "/nix/store/", 11) &&
+ strncmp(sub_info->path, "/run/current-system/systemd/lib/", 32)) ||
+ strstr(sub_info->path, "..")) {
printk(KERN_ALERT "grsec: denied exec of usermode helper binary %.950s located outside of /sbin and system library paths\n", sub_info->path);
retval = -EPERM;
goto fail;
goto out;