]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
UBUNTU: [Debian] supply perf with appropriate prefix to ensure use of local config
authorAndy Whitcroft <apw@canonical.com>
Wed, 31 Jul 2013 12:41:32 +0000 (13:41 +0100)
committerTim Gardner <tim.gardner@canonical.com>
Mon, 20 Feb 2017 03:57:58 +0000 (20:57 -0700)
commitcd38174aea5d5f68402f892d35e9f67abae60854
tree27e06a6e1f25661586e325447a0a9d68f93c6997
parentf722d17d2c895fb06fc7431401260d104817b9aa
UBUNTU: [Debian] supply perf with appropriate prefix to ensure use of local config

If we do not supply an installation prefix when we are building perf
it will assume it is designed to run relative to the builders HOME.
This means that as built on a buildd we will check for the system
configuration relative to the buildd users home rather than in /etc.
This implies a local user could use this to compromise other users _if_
there is a buildd user installed on the system and they have access to it.

CVE-2013-1060
BugLink: http://bugs.launchpad.net/bugs/1206200
Signed-off-by: Andy Whitcroft <apw@canonical.com>
debian/rules.d/2-binary-arch.mk