Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

suid-binary vulnerabilities

Posted Oct 28, 2010 21:24 UTC (Thu) by jengelh (subscriber, #33263)
In reply to: suid-binary vulnerabilities by cesarb
Parent article: Two glibc vulnerabilities

>For instance, imagine if ping, instead of being setuid, called into dbus to load a helper daemon

Or just enhance the kernel to enable socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) for unprivileged users, and scrutinize packets sent/received through the socket.

(Log in to post comments)