Changeset 11865 in vbox for trunk/src/VBox/HostDrivers

Timestamp:

Aug 30, 2008 3:55:17 AM (16 years ago)

Author:

vboxsync

Message:

#3076: check in VBoxDrvLinuxCreate that the caller euid is root.

File:

• trunk/src/VBox/HostDrivers/Support/linux/SUPDrv-linux.c (modified) (1 diff)

trunk/src/VBox/HostDrivers/Support/linux/SUPDrv-linux.c

@@ -683 +683 @@
     Log(("VBoxDrvLinuxCreate: pFilp=%p pid=%d/%d %s\n", pFilp, RTProcSelf(), current->pid, current->comm));
 
+#ifdef VBOX_WITH_HARDENING
+    /*
+     * Only root is allowed to access the device, enforce it!
+     */
+    if (current->euid != 0 /* root */ )
+    {
+        Log(("VBoxDrvLinuxCreate: euid=%d, expected 0 (root)\n", current->euid));
+        return EPERM;
+    }
+#endif /* VBOX_WITH_HARDENING */
+
     /*
      * Call common code for the rest.