go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Specify /proc explicitly

This commit is contained in:
Michael Pratt 2019-04-09 12:51:13 -07:00 committed by Michael Pratt
parent 37433204a8
commit 3513350de6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
content/docs/architecture_guide/security.md
View File

@ -37,8 +37,8 @@ might involve some combination of the following:
1. Racing with multiple threads in order to hit specific code paths.
For example, for the [Dirty Cow][dirtycow] privilege escalation bug, an
application would open a specific file in proc or use a specific `ptrace` system
call, and use multiple threads in order to trigger a race condition when
application would open a specific file in `/proc` or use a specific `ptrace`
system call, and use multiple threads in order to trigger a race condition when
touching a fresh page of memory. The attacker then gains control over a page of
memory belonging to the system. With additional privileges or access to
privileged data in the kernel, an attacker will often be able to employ