On Tue, Nov 22, 2005 at 01:49:13AM +0300, Alexey Kuznetsov wrote:
Actually, I remember one discussion. Herbert, wait a minute...
That's it: February 2005, Subject: [PATCH] Add audit uid to netlink credentials
We decided (or not?) that binding to anything but tgid and pid
must be prohibited by security reasons. Apaprently, the finding was lost.
Thanks for reminding me. We may still need to track that down (we
have now serialised most of the netlink processing so this my not be
as bad as it was).
However, I think explicit binding should still be allowed for root,
so nobody should take the PID for granted.
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt