Messages in this thread |  | | | Date | Tue, 16 Dec 2003 15:08:21 +0100 | | From | Martin Waitz <> | | Subject | Re: request: capabilities that allow users to drop privileges further | |
hi :)
On Mon, Dec 15, 2003 at 05:10:00PM -0500, Richard B. Johnson wrote:
> Of course, some root-shell programs bypass the 'C' runtime libraries.
of course, they have to as shellcode won't include a dynamic linker. ;)
so your approach does not help from a security point of view,
and felix only was concerned about security.
--
CU, / Friedrich-Alexander University Erlangen, Germany
Martin Waitz // Department of Computer Science 3 _________
______________/// - - - - - - - - - - - - - - - - - - - - ///
dies ist eine manuell generierte mail, sie beinhaltet //
tippfehler und ist auch ohne grossbuchstaben gueltig. /[unhandled content-type:application/pgp-signature] |  |