Aksal/nuttx
3
1
Fork 1
mirror of https://github.com/apache/nuttx.git synced 2026-08-15 01:13:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

drivers/: Multiple Drivers Are Registered With World Writable - Part 2

Browse source 
Permissions (Part 2)

Description:

In kernel builds, any unprivileged process running on the NuttX
device can open /dev/efuse and attempt to read/write fuse content.
Reading the fuses may provide valuable information to an attacker
controlling the user process. The write operation, in extreme cases
where the fuse blocks are not locked, may brick the device.

DISCLAIMER: I tried to be strict with the settings, better to relax them
later if it's needed.

This is part of https://github.com/apache/nuttx/issues/19410

See https://github.com/apache/nuttx/issues/19410

Compiles ok.

Signed-off-by: Catalin Visinescu <catalin_visinescu@yahoo.com>
This commit is contained in:
Catalin Visinescu 2026-07-14 20:40:10 -04:00 • committed by Xiang Xiao
parent f20cf4aac3
commit 081e4c478a
197 changed files with 207 additions and 207 deletions
Download patch file Download diff file Expand all files Collapse all files

2
drivers/rc/lirc_dev.c
View file

@ -796,7 +796,7 @@ int lirc_register(FAR struct lirc_lowerhalf_s *lower, int devno)
/* Register remote control character device */
snprintf(path, DEVNAME_MAX, DEVNAME_FMT, devno);
ret = register_driver(path, &g_lirc_fops, 0666, upper);
ret = register_driver(path, &g_lirc_fops, 0600, upper);
if (ret < 0)
{
goto drv_err;