Linux-kernel mailing list archive 1998-31,: Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

# Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds

Jon Lewis (jlewis@inorganic5.fdt.net)
Mon, 3 Aug 1998 23:50:42 -0400 (EDT)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Edward S. Marshall: "Re: DEVFSv50 and /dev/fb? (or /dev/fb/? ???)"
- Previous message: Syd Alsobrook: "Re: CIPE - Encrypted IP Encapsulation"
- In reply to: David S. Miller: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"
- Next in thread: Zachary Amsden: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"

On Mon, 3 Aug 1998, David S. Miller wrote:

> We had an issue like this last year, where someone tried to kill
> security exploits by putting a monkey wrench into the kernel
> (I'm refereing to the non-executable stack patches). That change
> didn't go in, and we're still alive today.

And there's a camp of people who consider linux without secure-linux
unsuitable for use on the internet. Sure, it's a bandaid...but it
definitely does stop alot of the bleeding.

------------------------------------------------------------------
Jon Lewis <jlewis@fdt.net> | Spammers will be winnuked or
Network Administrator | drawn and quartered...whichever
Florida Digital Turnpike | is more convenient.
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

- Next message: Edward S. Marshall: "Re: DEVFSv50 and /dev/fb? (or /dev/fb/? ???)"
- Previous message: Syd Alsobrook: "Re: CIPE - Encrypted IP Encapsulation"
- In reply to: David S. Miller: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"
- Next in thread: Zachary Amsden: "Re: [PATCH] [SECURITY] suid procs exec'd with bad 0,1,2 fds"