Bugtraq mailing list archives

Re: Flaws in recent Linux kernels


From: Thomas Fischbacher <Thomas.Fischbacher () Physik Uni-Muenchen DE>
Date: Fri, 26 Oct 2001 13:29:41 +0200 (CEST)


        if (current->euid ==0 ) {

Hm. Let me think. ptrace is basically used to dig out problems. From the
philosophical point of view, if root ptraces, the program having problems
will run as root. This is a constellation that one might want to avoid.

It's certainly a good thing to be able to ptrace without being root.

-- 
regards,               tf () cip physik uni-muenchen de              (o_
 Thomas Fischbacher -  http://www.cip.physik.uni-muenchen.de/~tf  //\
(lambda (n) ((lambda (p q r) (p p q r)) (lambda (g x y)           V_/_
(if (= x 0) y (g g (- x 1) (* x y)))) n 1))                  (Debian GNU)


Current thread: