mac80211: make debugfs files root-only
Unfortunately, debugfs can be made to access invalid memory by open()ing a file and then waiting until the corresponding debugfs file has been removed (and, probably, the underlying object.) That could be exploited by any user if the user is able to open debugfs files and can cause networking devices, STA entries or similar to disappear which is quite easy to do. Hence, all debugfs files should be root-only. Signed-off-by: Johannes Berg <johannes@sipsolutions.net> Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
committed by
John W. Linville
parent
a82d992261
commit
bebb8a5e2c
@@ -37,7 +37,7 @@ static const struct file_operations name## _ops = { \
|
||||
};
|
||||
|
||||
#define DEBUGFS_ADD(name) \
|
||||
local->debugfs.name = debugfs_create_file(#name, 0444, phyd, \
|
||||
local->debugfs.name = debugfs_create_file(#name, 0400, phyd, \
|
||||
local, &name## _ops);
|
||||
|
||||
#define DEBUGFS_DEL(name) \
|
||||
@@ -130,7 +130,7 @@ static const struct file_operations stats_ ##name## _ops = { \
|
||||
};
|
||||
|
||||
#define DEBUGFS_STATS_ADD(name) \
|
||||
local->debugfs.stats.name = debugfs_create_file(#name, 0444, statsd,\
|
||||
local->debugfs.stats.name = debugfs_create_file(#name, 0400, statsd,\
|
||||
local, &stats_ ##name## _ops);
|
||||
|
||||
#define DEBUGFS_STATS_DEL(name) \
|
||||
|
Reference in New Issue
Block a user