Re: /proc filesystem allows bypassing directory permissions on Linux

[Dan Yefimov <dan@xxxxxxxxxxxxxxxx>]

On 25.10.2009 2:40, psz@xxxxxxxxxxxxxxxxx wrote:
> Dear Pavel,
>
> > ... that's exactly the problem.
>
> I see, the /proc/*/fd/* objects seem "confused": are they symlinks,
> hardlinks, or open file descriptors? I guess should always act as
> the latter, where access mode flags (O_RDONLY or O_RDWR) are set at
> open() and not changeable afterwards in fcntl(). Any open() on them
> should behave as a dup().
Paul, in authentic kernels /proc/<PID>/fd/<FD> are symlinks, not anything other. 
There're no such publicly accessible file objects, as file descriptors, there're 
only files (including special ones), directories and symlinks. But the above 
words don't necessary relate to patched kernels like distributed by third parties.
--

Sincerely Your, Dan.