Messages in this thread | | | From | (David Wagner) | Subject | Re: [PATCH] capabilities not inherited | Date | Thu, 9 Jun 2005 14:55:38 +0000 (UTC) |
| |
Alexander Nyberg wrote: >tor 2005-06-09 klockan 02:59 +0000 skrev David Wagner: >> [...] the sendmail attack [...] > >I'll look this up but it sounds very weird and I don't see how this >would happen with this change.
Yup, it was a weird one indeed -- which is part of why I'm concerned. Take a look at the attack again, then re-read my message. Maybe my concerns will make more sense once you refresh your memory about the setuid capabilities attack? If not, feel free to ask again, and I'll try to elaborate. Here is a pointer to one description of that attack: http://www.cs.berkeley.edu/~daw/papers/setuid-usenix02.pdf (jump straight to Section 7.1) - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |