lkml.org 
[lkml]   [1998]   [Aug]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds
Date
> 
> You can wait forever, or just try it on your system.
>
> Or sombody had better tell me why they shouldn't fix their broken
> applications.
>

Err, noatime, nodiratime, etc...

If you lived in south central LA, would you wait for the politicians to clean
up all the ruffians, or would you invest in a bulletproof vest?

Bulletproof vests don't protect you from head shots or extremity shots, but
they do a damn good job at protecting the 90% of places that idiots can hit you.

We've already established that:

A) /proc/whatever can be there to enable/disable stack protection by default
B) ELF bits *ARE* there for this such thing
C) it doesn't remove the issue, it provides additional notification (whereas you
have none currently) and provides some additional protection (whereas you have none
currently).

You keep going at it from "fix their broken applications", I'm going at it from
"kick their a** off the system because they were logged as attempting to break root".

They're 2 distinctly different issues.

We've already shown that this feature can be disabled.

You let noatime and nodiratime into the kernel.

Well, the noatime feature breaks /bin/login when it checks for new mail, it always
thinks you have new mail. You can enable/disable it at will -- the stack patch can
be done the same.

>
> Linus
>

--Perry

--
Perry Harrington Linux rules all OSes. APSoft ()
email: perry@apsoft.com Think Blue. /\

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.076 / U:0.076 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site