diff options
| author | Dmitry Vyukov <dvyukov@google.com> | 2019-12-19 19:31:04 +0100 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2019-12-19 19:32:45 +0100 |
| commit | af9047c60a3db32d5e43c29321f8f531db051a63 (patch) | |
| tree | 84ab57a09469473a17dc548d30d6a9b074f25599 /executor | |
| parent | fa392d3014cf619b5aa945efbd8f99cd79e50a71 (diff) | |
sys/linux: prohibit TIOCSSERIAL
Replace TIOCSSERIAL with TIOCGSERIAL.
TIOCSSERIAL can do nasty things under root, like causing writes to random memory
pretty much like /dev/mem, but this is also working as intended.
For details see:
https://groups.google.com/g/syzkaller-bugs/c/1rVENJf9P4U/m/QtGpapRxAgAJ
https://syzkaller.appspot.com/bug?extid=f4f1e871965064ae689e
TODO: TIOCSSERIAL does some other things that are not dangerous
and would be nice to test, if/when we can sanitize based on sandbox value
we could prohibit it only under sandbox=none.
Diffstat (limited to 'executor')
0 files changed, 0 insertions, 0 deletions