![]() | |||||||||||||
Messages in this thread |
On Tue, 11 Feb 1997, Ray Auchterlounie wrote: > In article <Pine.LNX.3.95.970210105253.7863A-100000@gatekeeper.burgessinc.com> > Nathan Bryant <nathan@burgessinc.com> wrote: > [...] > >> > > On Fri, 7 Feb 1997 tyson@rwii.com wrote: > >> > > I don't agree. Doom has a known bug which allows any user on your system > >> > > to get root if doom is installed setuid root. Every Linux distribution > [...] > > >Unfortunately there is no DGA version of Doom. (Doom was released long > >before DGA became available.) It would be nice if X servers other than > >XFree86 supported DGA, too. :( > > At least according to a thread on c.o.l.d.s, DGA requires setuid root > as well (or, quake suggests "chmod 666 /dev/mem" - erm...). Also DGA > programs are responsible for dropping permissions themselves (SVGAlib > does it for you). > > On that basis I'd say DGA looks worse for security than SVGAlib :-( <CHANT> GGI! GGI! GGI! GGI! </CHANT> +-----------------------+---------------------------------------+ | Nathan Bryant | Unsolicited commercial e-mail WILL be | | nathan@burgessinc.com | charged an $80/hr proofreading fee. | +-----------------------+---------------------------------------+ | ||||||||||||
| Last update: 2005-03-22 13:38 [W:0.163 / U:0.320 seconds] ©2003-2008 Jasper Spaans | |||||||||||||