[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Locally exploitable races? OpenBSD

To: tech@openbsd.org
Subject: Re: Locally exploitable races? OpenBSD
From: Hannah Schroeter <uk1o@rz.uni-karlsruhe.de>
Date: Tue, 5 Jun 2001 22:07:36 +0200
Content-Disposition: inline
Mail-Followup-To: tech@openbsd.org
References: <Pine.GSO.4.21.0106050900180.8733-100000@freenet.nether.net> <200106051749.f55HnS630115@xerxes.courtesan.com>
User-Agent: Mutt/1.2.5i

Hello!

On Tue, Jun 05, 2001 at 11:49:28AM -0600, Todd C. Miller wrote:
> What he's talking about is completely irrelevant because it requires
> things use rfork() and nothing in the system does...

> Should the races get fixed?  Yes.
> Is it a real problem?  Nope.

Huh? As long as non-root users can invoke rfork() and can thus crash
(and possibly more) the machine by purpose, it IS a real problem IMHO.

> Should developers respond to obvious flame bait?  No again.

>  - todd

Kind regards,

Hannah.

Follow-Ups:
- Re: Locally exploitable races? OpenBSD
  - From: Dan Weeks <danimal@danimal.org>
- Re: Locally exploitable races? OpenBSD
  - From: "Todd C. Miller" <Todd.Miller@courtesan.com>

References:
- Locally exploitable races? OpenBSD
  - From: Zvezdelin <zvezdi@freenet.nether.net>
- Re: Locally exploitable races? OpenBSD
  - From: "Todd C. Miller" <Todd.Miller@courtesan.com>

Prev by Date: Re: Locally exploitable races? OpenBSD
Next by Date: Re: Locally exploitable races? OpenBSD
Prev by thread: Re: Locally exploitable races? OpenBSD
Next by thread: Re: Locally exploitable races? OpenBSD
Index(es):
- Date
- Thread