search for: fchdir

This adds the fchdir syscall and a new opendir() function. diff -purNx linux ../klibc-0.172/klibc/SYSCALLS.def ./klibc/SYSCALLS.def --- ../klibc-0.172/klibc/SYSCALLS.def 2004-08-25 23:56:49.000000000 +0200 +++ ./klibc/SYSCALLS.def 2004-09-11 20:46:10.187551992 +0200 @@ -86,6 +86,7 @@ int access(const char *, int) in...

http://bugzilla.mindrot.org/show_bug.cgi?id=220 ------- Additional Comments From djm at mindrot.org 2003-05-14 23:06 ------- Any followup on this, Ben? ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...ern int link(const char *, const char *); -__extern int linkat(int, const char *, int, const char *); +__extern int linkat(int, const char *, int, const char *, int); __extern int unlink(const char *); __extern int unlinkat(int, const char *, int); __extern int chdir(const char *); __extern int fchdir(int); __extern int chmod(const char *, mode_t); __extern int fchmod(int, mode_t); -__extern int fchmodat(int, const char *, mode_t); __extern int mkdir(const char *, mode_t); -__extern int mkdirat(int, const char *, const char *, mode_t); +__extern int mkdirat(int, const char *, mode_t); __exte...

..._IFDIR|0700, st_size=4096, ...}) = 0 close(3) = 0 lstat64("/var/run/dovecot/", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 open(".", O_RDONLY|O_LARGEFILE) = 3 open("/var/run/dovecot//login", O_RDONLY|O_LARGEFILE|O_NOFOLLOW) = 4 fchdir(4) = 0 open("/dev/null", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = -1 ENOTDIR (Not a directory) open(".", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 6 fstat64(6, {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) =...

...issue: if a non-root user can perform chroot(), they can alter the name-space "seen" by setuid programs, and potentially compromise them (assuming a user-writable directory [like /tmp] on the same partition as a setuid program.) Are there any other reasons? (Besides the issues with fchdir() which I assume are adequately fixed). Assuming there aren't any other issues leads to my last Q... Actually, a proposal: Q3: Why not allow non-root users to chroot() _as long as the target dir. is on a partition mounted nosuid_? Seems like this would be a simple mechanism (both to unde...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

..."/mailstore/domains/test.com/test/mdbox/mailboxes/Spam/dbox-Mails","/mailstore/domains/test.com/test/mdbox/..DOVECOT-TrasH") = 0 (0x0) open(".",O_RDONLY,00) = 12 (0xc) open("/mailstore/domains/test.com/test/mdbox/..DOVECOT-TrasH",O_NOFOLLOW,00) = 13 (0xd) fchdir(0xd,0x100,0x0,0x7b30,0x101010101010101,0x8080808080808080) = 0 (0x0) stat(".",{ mode=drwx------ ,inode=28761,size=3,blksize=131072 }) = 0 (0x0) open(".",O_NONBLOCK|0x20000,00) = 14 (0xe) fstat(14,{ mode=drwx------ ,inode=28761,size=3,blksize=131072 }) = 0 (0x0) fcntl(14,F_SET...

This morning, I noticed in my security email, that my entire /usr/bin directory had setuid diff's set on them. I think I've been hacked. So I installed chkrootkit from ports and ran it. It showed not infected for everything, except NETSTAT. NETSTAT showed infected... I ran chkrootkit for another machine (at my office), and it showed not infected for everything. Both machines are

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...

...arg-nonnull bitrotate c++defs c-ctype chdir-long chown cloexec close close-hook cycle-check d-ino d-type dev-ino dirent dirent-safer dirfd dirname-lgpl double-slash-root dup2 errno error exitfail extensions fchdir fclose fcntl fcntl-h fcntl-safer fdopendir filevercmp float fts full-write getcwd getdtablesize getopt-gnu getopt-posix gettext-h hash hash-pjw i-ring include_next inline intprops inttypes lchown lstat malloc-posi...