| commit | c9438d3d949d4c5f88f630b647011b8381c63ae5 | |
| author | Henrique de Moraes Holschuh <hmh@hmh.eng.br> | |
| Fri, 26 Feb 2010 01:22:22 +0000 (25 22:22 -0300) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Mon, 15 Mar 2010 16:06:48 +0000 (15 09:06 -0700) | ||
| tree | 2d12479e827ee849f3df2eef9117e72dd7040e1f | treesnapshot (tar.gz zip) |
| parent | 6f4698f6c3846c4ddccaacee85aec17599dabcff | commitdiff |
thinkpad-acpi: lock down video output state access
commit b525c06cdbd8a3963f0173ccd23f9147d4c384b5 upstream.
Given the right combination of ThinkPad and X.org, just reading the
video output control state is enough to hard-crash X.org.
Until the day I somehow find out a model or BIOS cut date to not
provide this feature to ThinkPads that can do video switching through
X RandR, change permissions so that only processes with CAP_SYS_ADMIN
can access any sort of video output control state.
This bug could be considered a local DoS I suppose, as it allows any
non-privledged local user to cause some versions of X.org to
hard-crash some ThinkPads.
Reported-by: Jidanni <jidanni@jidanni.org>
Signed-off-by: Henrique de Moraes Holschuh <hmh@hmh.eng.br>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit b525c06cdbd8a3963f0173ccd23f9147d4c384b5 upstream.
Given the right combination of ThinkPad and X.org, just reading the
video output control state is enough to hard-crash X.org.
Until the day I somehow find out a model or BIOS cut date to not
provide this feature to ThinkPads that can do video switching through
X RandR, change permissions so that only processes with CAP_SYS_ADMIN
can access any sort of video output control state.
This bug could be considered a local DoS I suppose, as it allows any
non-privledged local user to cause some versions of X.org to
hard-crash some ThinkPads.
Reported-by: Jidanni <jidanni@jidanni.org>
Signed-off-by: Henrique de Moraes Holschuh <hmh@hmh.eng.br>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| Documentation/laptops/thinkpad-acpi.txt | diffblobblamehistory | |
| drivers/platform/x86/Kconfig | diffblobblamehistory | |
| drivers/platform/x86/thinkpad_acpi.c | diffblobblamehistory |