[lkml]   [2000]   [Jul]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: TO HELL WITH IT THEN......(re: disk-destroyer.c)
    Andre Hedrick <> said:

    > When it gets added, I will send you a patch to remove it so your computer
    > can be screwed in user land. I think I have a CERT expert showing me that
    > the size of disk-destroyer.c in compiled form is smaller than the
    > shellcode stack. Therefore you push the stack, and if the PID you push
    > into is running a root.root you are TOAST.

    And if they get root and do a "dd if=/dev/zero of=/dev/hda" I'm toast
    too. Disable dd(1), cp(1), echo(1), ... for that reason?

    I'm assuming the relevant ioctls are protected by the standard
    permissions, so (given sane permissions) only root can blow away the disk.
    If a cracker gets root, I'm toast. If the ioctls are "protected" by the
    kernel, they'll just do them the hard way. What's new there?

    Sure, if the kernel does wrong stuff it has to be fixed. If the user does
    idiotic stuff, it's his/her problem. Unix has always worked that way, and I
    like it exactly for that general reason.
    Dr. Horst H. von Brand
    Departamento de Informatica Fono: +56 32 654431
    Universidad Tecnica Federico Santa Maria +56 32 654239
    Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:57    [W:0.017 / U:92.408 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site