[lkml]   [1996]   [May]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: As 2.0 looms
    Marek Michalkiewicz writes ("Re: As 2.0 looms"):
    > - /proc is still insecure :-(. You can open /proc/<pid>/mem and
    > hold the file descriptor, then have the target process exec some
    > setuid/setgid/unreadable program and read its memory at will.
    > Not good for things like ssh - the secret host key is there...

    Oh, ****, has this _still_ not been fixed ?

    If I revamp my /proc-paranoia patch for 1.3.x, will it get accepted,
    or should I not bother ?


     \ /
      Last update: 2005-03-22 13:37    [W:0.016 / U:75.828 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site