| |||||||||||||
A privilege escalation flaw in udevA privilege escalation flaw in udevPosted Apr 23, 2009 14:12 UTC (Thu) by BenHutchings (subscriber, #37955)In reply to: A privilege escalation flaw in udev by jimparis Parent article: A privilege escalation flaw in udev No, that commit does what it says. The commit that fixed this bug was made by Scott James Remnant and has the subject "libudev: monitor - ignore messages from unusual sources". This is not entirely explicit, but it may not have immediately occurred to him that this was a severe security flaw. I can say that he was fairly quick to notify others about it.
(Log in to post comments)
A privilege escalation flaw in udev Posted Apr 23, 2009 17:08 UTC (Thu) by jimparis (subscriber, #38647) [Link] That is not true. Go look at Kay's commit. It adds the SO_PASSCRED option to the socket and adds an explicit check for (cred->uid != 0). As the LWN writeup indicated, 'either patch "alone would be sufficient" to fix the problem'. And your statement about him being quick to notify others is misleading at best. There has still not been a single posting on the udev mailing list about this problem!
|
|||||||||||||