Aksal/nuttx
3
1
Fork 1
mirror of https://github.com/apache/nuttx.git synced 2026-08-01 20:28:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

drivers/efuse/efuse: Drivers Registered With World Write Permissions(Part 1)

Browse source 
Description:

In kernel builds, any unprivileged process running on the NuttX device
can open /dev/efuse and attempt to read/write fuse content. Reading the
fuses may provide valuable information to an attacker controlling the user
process. The write operation, in extreme cases where the fuse blocks are
not locked, may brick the device.

This is part of https://github.com/apache/nuttx/issues/19410

Compiles ok.

Signed-off-by: Catalin Visinescu <catalin_visinescu@yahoo.com>
This commit is contained in:
Catalin Visinescu 2026-07-12 03:13:00 -04:00 • committed by Alin Jerpelea
parent 0d2993dd87
commit 8d2b71d127
75 changed files with 85 additions and 85 deletions
Download patch file Download diff file Expand all files Collapse all files

2
crypto/cryptodev.c
View file

@ -1174,7 +1174,7 @@ static int csefree(FAR struct csession *cse)
void devcrypto_register(void)
{
register_driver("/dev/crypto", &g_cryptoops, 0666, NULL);
register_driver("/dev/crypto", &g_cryptoops, 0660, NULL);
#ifdef CONFIG_CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO
swcr_init();