# HG changeset patch # User rob@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # Node ID 3d1dddefa2aed42c287186dc09bde89aa0a08cf8 # Parent 1e225598ce827a8d810ad57e82547ad6ed9c0258 Backported fix from 2.6.17.4 for "fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)" Signed-off-by: Rob Bradford diff -r 1e225598ce82 -r 3d1dddefa2ae patches/linux-2.6.16.13/fix-prctl-escalation.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/patches/linux-2.6.16.13/fix-prctl-escalation.patch Thu Jul 13 13:20:22 2006 +0100 @@ -0,0 +1,12 @@ +diff -ru ../pristine-linux-2.6.16.13/kernel/sys.c./kernel/sys.c +--- ../pristine-linux-2.6.16.13/kernel/sys.c 2006-07-13 13:01:03.000000000 +0100 ++++ ./kernel/sys.c 2006-07-13 13:01:39.000000000 +0100 +@@ -1802,7 +1802,7 @@ + error = current->mm->dumpable; + break; + case PR_SET_DUMPABLE: +- if (arg2 < 0 || arg2 > 2) { ++ if (arg2 < 0 || arg2 > 1) { + error = -EINVAL; + break; + }