lkml.org 
[lkml]   [1996]   [May]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: As 2.0 looms
    Marek Michalkiewicz writes ("Re: As 2.0 looms"):
    ...
    > - /proc is still insecure :-(. You can open /proc/<pid>/mem and
    > hold the file descriptor, then have the target process exec some
    > setuid/setgid/unreadable program and read its memory at will.
    > Not good for things like ssh - the secret host key is there...

    Oh, ****, has this _still_ not been fixed ?

    If I revamp my /proc-paranoia patch for 1.3.x, will it get accepted,
    or should I not bother ?

    Ian.


    \
     
     \ /
      Last update: 2005-03-22 13:37    [W:0.016 / U:31.756 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site