Subject: Re: [linux-audio-dev] LSM: Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation
From: Lee Revell (rlrevell_AT_joe-job.com)
Date: Tue Dec 28 2004 - 23:46:07 EET
On Tue, 2004-12-28 at 22:36 +0100, Frank Barknecht wrote:
> Hallo,
> Fernando Lopez-Lezcano hat gesagt: // Fernando Lopez-Lezcano wrote:
>
> > On Tue, 2004-12-28 at 12:28, Lee Revell wrote:
> > > On Mon, 2004-12-27 at 14:41 +0100, Frank Barknecht wrote:
> > > > Read on here:
> > > > http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-12/0390.html
> > >
> > > Wow, this is a HORRIBLE bug.
> >
> > Indeed. I tried it and it works. Someone should have been pointing a
> > camera at me to capture the "moment" :-) Spent the better part of
> > yesterday building new Planet CCRMA kernels without this "feature".
>
> Oh, it seems to be not *that* bad, however. See this discussion on the
> linux-security-module list: http://tinyurl.com/5ey2b
Well, just because the NSA guy would not do that on his system, does not
mean it isn't a problem for Joe User. ;-)
Lee
This archive was generated by hypermail 2b28 : Tue Dec 28 2004 - 23:49:18 EET