From bf85b5e63ae60df87408e372f5583003c3ca8c65 Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Tue, 21 Apr 2020 13:10:06 +0200 Subject: [PATCH] execve.2: Changes to the "dumpable" flag may change ownership of /proc/PID files Reported-by: Eric Hopper Signed-off-by: Michael Kerrisk --- man2/execve.2 | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/man2/execve.2 b/man2/execve.2 index 154b38d42..eb44abd31 100644 --- a/man2/execve.2 +++ b/man2/execve.2 @@ -210,8 +210,7 @@ The following Linux-specific process attributes are also not preserved during an .BR execve (): .IP * 3 -The process's dumpable -flag is set to the value 1, +The process's "dumpable" attribute is set to the value 1, unless a set-user-ID program, a set-group-ID program, or a program with capabilities is being executed, in which case the dumpable flag may instead be reset to the value in @@ -220,6 +219,13 @@ in the circumstances described under .BR PR_SET_DUMPABLE in .BR prctl (2). +Note that changes to the "dumpable" attribute may cause ownership +of files in the process's +.IR /proc/[pid] +directory to change to +.IR root:root , +as described in +.BR proc (5). .IP * The .BR prctl (2)