Subject: Re: [linux-audio-dev] LSM: Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation
From: Lee Revell (rlrevell_AT_joe-job.com)
Date: Tue Dec 28 2004 - 23:32:01 EET
On Tue, 2004-12-28 at 13:17 -0800, Fernando Lopez-Lezcano wrote:
> On Tue, 2004-12-28 at 12:28, Lee Revell wrote:
> > On Mon, 2004-12-27 at 14:41 +0100, Frank Barknecht wrote:
> > > Read on here:
> > > http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-12/0390.html
> >
> > Wow, this is a HORRIBLE bug.
>
> Indeed. I tried it and it works. Someone should have been pointing a
> camera at me to capture the "moment" :-) Spent the better part of
> yesterday building new Planet CCRMA kernels without this "feature".
Me too. Confirmed it with the brand-new 2.6.10. My jaw hit the desk.
This apparently was never posted to LKML. I just posted it. This
should trigger a 2.6.10.1 IMHO.
Lee
This archive was generated by hypermail 2b28 : Tue Dec 28 2004 - 23:35:02 EET