| |||||||||||||
The core issueThe core issuePosted Jun 18, 2008 1:07 UTC (Wed) by vonbrand (subscriber, #4458)In reply to: The core issue by wtarreau Parent article: Stable kernel 2.6.25.7 released
Or create a device for /, mount it somewhere, and cd there. Or a hundred other creative ways to escape, or to thoroughly thrash the system... As root in (traditional) Unix there is nothing that stops you. And that with SELinux you can make UID 0 powerless doesn't mean that that is common today, even where SELinux is enabled by default. Sure, if there is a bug that could make the system crash or misbehave, it should be fixed. But if only root can exploit it, it is definitively much lower priority than the same that any user can trigger locally or (even worse) remotely.
(Log in to post comments)
|
|||||||||||||