儲存庫 vbox 的更動 11865

時間撮記:

2008-8-30 上午03:55:17 (16 年 以前)

作者:

vboxsync

訊息:

#3076: check in VBoxDrvLinuxCreate that the caller euid is root.

檔案:

• trunk/src/VBox/HostDrivers/Support/linux/SUPDrv-linux.c (修改) (1 筆差異)

trunk/src/VBox/HostDrivers/Support/linux/SUPDrv-linux.c

@@ -683 +683 @@
     Log(("VBoxDrvLinuxCreate: pFilp=%p pid=%d/%d %s\n", pFilp, RTProcSelf(), current->pid, current->comm));
 
+#ifdef VBOX_WITH_HARDENING
+    /*
+     * Only root is allowed to access the device, enforce it!
+     */
+    if (current->euid != 0 /* root */ )
+    {
+        Log(("VBoxDrvLinuxCreate: euid=%d, expected 0 (root)\n", current->euid));
+        return EPERM;
+    }
+#endif /* VBOX_WITH_HARDENING */
+
     /*
      * Call common code for the rest.