android_kernel_xiaomi_sm8350/drivers/scsi/aacraid
Alan Cox 5f78e89b5f [SCSI] aacraid: fix security weakness
Actually there are several but one is trivially fixed

1.	FSACTL_GET_NEXT_ADAPTER_FIB ioctl does not lock dev->fib_list
but needs to
2.	Ditto for FSACTL_CLOSE_GET_ADAPTER_FIB
3.	It is possible to construct an attack via the SRB ioctls where
the user obtains assorted elevated privileges. Various approaches are
possible, the trivial ones being things like writing to the raw media
via scsi commands and the swap image of other executing programs with
higher privileges.

So the ioctls should be CAP_SYS_RAWIO - at least all the FIB manipulating
ones. This is a bandaid fix for #3 but probably the ioctls should grow
their own capable checks. The other two bugs need someone competent in that
driver to fix them.

Signed-off-by: Alan Cox <alan@redhat.com>
Acked-by: Mark Salyzyn <mark_salyzyn@adaptec.com>
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2007-11-11 17:35:48 -06:00
..
aachba.c [SG] Update drivers to use sg helpers 2007-10-22 21:19:53 +02:00
aacraid.h Fix misspellings of "system", "controller", "interrupt" and "necessary". 2007-10-19 23:10:43 +02:00
commctrl.c fix abuses of ptrdiff_t 2007-10-29 07:41:33 -07:00
comminit.c fix abuses of ptrdiff_t 2007-10-29 07:41:33 -07:00
commsup.c [SCSI] aacraid: fix up le32 issues in BlinkLED 2007-11-07 08:17:55 -08:00
dpcsup.c fix abuses of ptrdiff_t 2007-10-29 07:41:33 -07:00
linit.c [SCSI] aacraid: fix security weakness 2007-11-11 17:35:48 -06:00
Makefile
nark.c [SCSI] aacraid: draw line in sand, sundry cleanup and version update 2007-07-27 09:13:28 -04:00
rkt.c [SCSI] aacraid: draw line in sand, sundry cleanup and version update 2007-07-27 09:13:28 -04:00
rx.c [SCSI] aacraid: fix Sunrise Lake reset handling 2007-07-28 10:11:32 -04:00
sa.c
TODO