| |||||||||||||
Fun with NULL pointers, part 1Fun with NULL pointers, part 1Posted Jul 21, 2009 2:13 UTC (Tue) by smurf (subscriber, #17840)In reply to: Fun with NULL pointers, part 1 by kpfleming Parent article: Fun with NULL pointers, part 1
A setuid program loading unprivileged modules usually isn't a problem if that program drops its privs before doing so.
Usually.
This whole mess goes to show that security is a hard-to-solve problem.
Taking privs off pulseaudio (Linux has been capable of doing better than all-out-setuid for _how_ long, exactly ?!?) may or may not be the solution in this case, I haven't checked.
(Log in to post comments)
|
|||||||||||||