From patchwork Sun Jan 9 23:27:26 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Rui Salvaterra X-Patchwork-Id: 1577630 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: bilbo.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=lists.infradead.org header.i=@lists.infradead.org header.a=rsa-sha256 header.s=bombadil.20210309 header.b=m3N4tJuK; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20210112 header.b=ppt/QF1g; dkim-atps=neutral Authentication-Results: ozlabs.org; spf=none (no SPF record) smtp.mailfrom=lists.openwrt.org (client-ip=2607:7c80:54:e::133; helo=bombadil.infradead.org; envelope-from=openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org; receiver=) Received: from bombadil.infradead.org (bombadil.infradead.org [IPv6:2607:7c80:54:e::133]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bilbo.ozlabs.org (Postfix) with ESMTPS id 4JXCpw22Wzz9t6S for ; Mon, 10 Jan 2022 10:29:44 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-Id:Date:Subject:Cc :To:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References: List-Owner; bh=DwJuZmpSYgPi1vyqTNznmcVgwrh7K0BCeV5Logo6u4Y=; b=m3N4tJuKG73jic q0/JeqBDK4krZ9UQXmTM7Y2A5Ku2RM7bsl+tbAImCffl2LVuhh+BVMpuSOPMEcHN8ZI2Y85KNdt90 zT+gCRv5hF73vpFc0QefW9DWgxXUcS4k2q53OZ7+TF7z4iEJ2AJbrW+KQgLzzUK9O4BRLoRWdUUv4 Wzo0mwkCtZcYkHWpS0SWNh1RifdrLUiHzKHNzQhzgAWNifvnODMOKXmbgfXiLhnDNHuVOQUp8UXjg hsyc23DK/+iOEO7Ds4U1QYxvIZ+OOx/1y8l/0/k2K6brNY8rNe9KAyb2whTRhOrRNyi4QYpYHGSq4 RdNIJMihTa5/AqqWfu+w==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.94.2 #2 (Red Hat Linux)) id 1n6hb9-008Ync-Da; Sun, 09 Jan 2022 23:27:39 +0000 Received: from mail-lf1-x12b.google.com ([2a00:1450:4864:20::12b]) by bombadil.infradead.org with esmtps (Exim 4.94.2 #2 (Red Hat Linux)) id 1n6hb6-008Yn4-Ug for openwrt-devel@lists.openwrt.org; Sun, 09 Jan 2022 23:27:38 +0000 Received: by mail-lf1-x12b.google.com with SMTP id x7so38220141lfu.8 for ; Sun, 09 Jan 2022 15:27:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=Igsc/zvfGUVar+ovS0vLf/bfTQNWsd/NysCye8oTtpU=; b=ppt/QF1gZX6z9WqCDPEHVs7jdemKgFYx4yCf+zkKPBHGL/hN0o4y27zNOCcwx7pwWY 7uiSAOJGcD03QvdIWHzglx9/qWV20gcO5pHWi2LvXUvmrA62LwomR8Iu2iyNG4eQSN3L kQ+WMOeVg5+7efybNpb1OVBMWyY3MeFkXyBiLFXvc0rRb+pZ+BYyG/Not8ToSQzIV4Ah MqpSTyM7RLT0YEtDo9X/rfvESRihE6WUtw2YY0iLYyOaFw5VXaKLEBe7LBGDfYjVDdcV FqxGm1cqFVhGXZDy9CVVix3gmNON0+0bJbQJJ3Pi9k8yOyVVWesLvqxXSVylbUZ4jrN9 3g2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=Igsc/zvfGUVar+ovS0vLf/bfTQNWsd/NysCye8oTtpU=; b=Lbn4hE884iCziDoZjGgJZf23poXDnEdO/i2PRMUvuGvMUMddeKIGxzqi2N61SP/e7m +6AMLMN1vOf7rUDuq+cE7l8LmKh8y5HzzdWcxOw/3QhKAGa8JIo4MmQE0Y6hDeLP64oV LhCZDrGvapVeajMo1sED2AB7dplbg6H+zvYkikWuaoNDv+K6VfxJuQ2XGB4jR8IyJvzO i2xitTdbrzbCou3cPBklqUnzC/f6bBXk+z5t9J33Zod6NwRKKBkVpfgOQiteNiPF6bSX 6aK9VZKWvfojFdfH+0wWIvwazfbYfHQY0u/kO43kzVaE84vTt+tJzn0Q1wJAOopKDKjJ idtg== X-Gm-Message-State: AOAM531o5hL/5oMTPAxAZimuNP/redhImLK/AKlf3Mx3+jG+er98Wxyj GGzrTcGXVz218MWu1ezDM8h1KkF7Cg== X-Google-Smtp-Source: ABdhPJzRU8VhqItoX5+kj4t64BIg/RUPy/syog8QFQY3AsMatGbYqrwuMZMBODKDx+C3F5yS11uuaw== X-Received: by 2002:a05:6512:3042:: with SMTP id b2mr65896142lfb.364.1641770855179; Sun, 09 Jan 2022 15:27:35 -0800 (PST) Received: from crystalwell.adg.lan (a109-49-8-180.cpe.netcabo.pt. [109.49.8.180]) by smtp.gmail.com with ESMTPSA id j4sm801749lfg.147.2022.01.09.15.27.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 09 Jan 2022 15:27:34 -0800 (PST) From: Rui Salvaterra To: openwrt-devel@lists.openwrt.org Cc: daniel@makrotopia.org, Rui Salvaterra Subject: [PATCH 0/2] procd: a couple of mount fixes Date: Sun, 9 Jan 2022 23:27:26 +0000 Message-Id: <20220109232728.3587-1-rsalvaterra@gmail.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20220109_152737_031305_9B90D6AB X-CRM114-Status: UNSURE ( 6.88 ) X-CRM114-Notice: Please train this message. X-Spam-Score: -0.2 (/) X-Spam-Report: Spam detection software, running on the system "bombadil.infradead.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Fix a potential security issue in the way /dev is mounted. Clean up the /dev/pts mounts while at it. Rui Salvaterra (2): procd: mount /dev with noexec procd: clean up /dev/pts mounts initd/early.c | 4 ++-- plug/coldplug.c | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) Content analysis details: (-0.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [2a00:1450:4864:20:0:0:0:12b listed in] [list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [rsalvaterra[at]gmail.com] -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain X-BeenThere: openwrt-devel@lists.openwrt.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: OpenWrt Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "openwrt-devel" Errors-To: openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org Fix a potential security issue in the way /dev is mounted. Clean up the /dev/pts mounts while at it. Rui Salvaterra (2): procd: mount /dev with noexec procd: clean up /dev/pts mounts initd/early.c | 4 ++-- plug/coldplug.c | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-)