[lkml]   [2000]   [Jul]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: TO HELL WITH IT THEN......(re: disk-destroyer.c)
Andre Hedrick <> said:

> When it gets added, I will send you a patch to remove it so your computer
> can be screwed in user land. I think I have a CERT expert showing me that
> the size of disk-destroyer.c in compiled form is smaller than the
> shellcode stack. Therefore you push the stack, and if the PID you push
> into is running a root.root you are TOAST.

And if they get root and do a "dd if=/dev/zero of=/dev/hda" I'm toast
too. Disable dd(1), cp(1), echo(1), ... for that reason?

I'm assuming the relevant ioctls are protected by the standard
permissions, so (given sane permissions) only root can blow away the disk.
If a cracker gets root, I'm toast. If the ioctls are "protected" by the
kernel, they'll just do them the hard way. What's new there?

Sure, if the kernel does wrong stuff it has to be fixed. If the user does
idiotic stuff, it's his/her problem. Unix has always worked that way, and I
like it exactly for that general reason.
Dr. Horst H. von Brand
Departamento de Informatica Fono: +56 32 654431
Universidad Tecnica Federico Santa Maria +56 32 654239
Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:57    [W:0.273 / U:1.688 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site