On Mon, Jan 05, 2004 at 07:27:17PM +0100, Martin Helas <mhelas@helas.net> wrote: > > Don't forget that 2.2 and 2.6 kernels are also affected. 2.6 patches > > are due shortly. > There is already a patch for 2.6 [1] published by Linus, but there is no > official patch yet. > [1] http://marc.theaimsgroup.com/?l=linux-kernel&m=107332139413041&w=2 There's an other fix in 2.4.24: <trini:mvista.com>: o /dev/rtc can leak parts of kernel memory to unpriviledged users As I haven't seen Linus' patch then, I forward ported the 2.4.24 patch: http://www.lsc.hu/2.6.0-security.patch This contains the RTC fixes, but the mremap check is not so strict - it's the original fix from 2.4.24. Cheers, GCS
Attachment:
signature.asc
Description: Digital signature