kern/127213: [tmpfs] sendfile on tmpfs data corruption
Marc Olzheim
zlo at zlo.nu
Wed Jul 29 09:20:03 UTC 2009
The following reply was made to PR kern/127213; it has been noted by GNATS.
From: Marc Olzheim <zlo at zlo.nu>
To: bug-followup at FreeBSD.org
Cc:
Subject: Re: kern/127213: [tmpfs] sendfile on tmpfs data corruption
Date: Wed, 29 Jul 2009 10:51:40 +0200
This is not just a bug, but a security hole. What you are seeing is the
content of other VM pages. This has exactly the same symptoms as
http://security.freebsd.org/advisories/FreeBSD-SA-05:02.sendfile.asc
In short: do not use tmpfs unless you trust all users on the system with
root access.
More information about the freebsd-fs
mailing list