lkml.org 
[lkml]   [1997]   [Dec]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: security warning
There's been a lot of discussion about this already, pay attention. It is
not a sure thing, it's easy to get around i've been told, and many
complain that it breaks unix standards. ie: the symlink in /tmp shit..

**********************************************************************
* Michael Freeman - UNIX/Network Engineer - Mobile Internet Services *
* www.mobis.com/~mfreeman - mfreeman@mobis.com >8) *
**********************************************************************
* "/earth is 98% full ... please delete anyone you can." *
**********************************************************************


On Tue, 16 Dec 1997, Albert D. Cahalan wrote:

> I suspect nearly everybody has a security hole on their system.
> (some of you can guess... please wait a few weeks)
> I would strongly suggest the following patch:
> ftp://ftp.fuller.edu/Linux/symlink-attack-patch-2.1.71
> I hope that patch gets in the kernel soon, default to "Y".
>


\
 
 \ /
  Last update: 2005-03-22 13:40    [W:0.073 / U:0.232 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site