You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Files opened by mdadm should be securely open. One (bad) example is check_one_sharer() function. The problem is that fopen does not put the lock on the file/path.
After opening the file, one can do following things:
alter or delete the file,
delete /run/mdadm and make it a soft link to another directory containing file with same name
Goal here is to analyze it and fix this issue globally so 3rd party access to the file is locked. Probably, this can be achieved with fstat.
In current implementation, opened file value is stored locally, messing with the file does not change its stored value.
Proposed scenario:
Lock file (and path)
Run checks
Open file
The text was updated successfully, but these errors were encountered:
Files opened by mdadm should be securely open. One (bad) example is check_one_sharer() function. The problem is that fopen does not put the lock on the file/path.
After opening the file, one can do following things:
alter or delete the file,
delete /run/mdadm and make it a soft link to another directory containing file with same name
Goal here is to analyze it and fix this issue globally so 3rd party access to the file is locked. Probably, this can be achieved with fstat.
In current implementation, opened file value is stored locally, messing with the file does not change its stored value.
Proposed scenario:
The text was updated successfully, but these errors were encountered: