]> www.infradead.org Git - users/jedix/linux-maple.git/commit
dtrace: add missing dtrace_*canload() for copyout() and copyoutstr().
authorNick Alcock <nick.alcock@oracle.com>
Tue, 6 Oct 2015 21:06:28 +0000 (22:06 +0100)
committerKris Van Hees <kris.van.hees@oracle.com>
Wed, 18 Nov 2015 00:54:07 +0000 (19:54 -0500)
commitcea402192274d90729e0b9befd3d735bf518b0e7
treefa962bbef424854f5f5e67f5049871a1f854ad36
parentd1b179c58f75453ae49675b445f51a8430754e9c
dtrace: add missing dtrace_*canload() for copyout() and copyoutstr().

On Solaris, where unprivileged tracing is permitted and zone tracing is
implemented, this is a security hole since it allows breaking through
both zone and unprivileged-dtrace boundaries.  Linux does not implement
either of these, so this fix is currently unobservable here.

Originally reported as a Solaris DTrace bug, it seems worth fixing here
too, against the day when we implement unprivileged tracing.

Signed-off-by: Nick Alcock <nick.alcock@oracle.com>
Acked-by: Kris Van Hees <kris.van.hees@oracle.com>
dtrace/dtrace_dif.c