| |||||||||||||
suid-binary vulnerabilitiessuid-binary vulnerabilitiesPosted Oct 29, 2010 15:14 UTC (Fri) by kees (subscriber, #27264)In reply to: suid-binary vulnerabilities by marcH Parent article: Two glibc vulnerabilities
Right, I don't meant to say it shouldn't be done. Getting rid of the setuid bit is a great goal. I was just trying to point out that it does not solve problems like those recently found in glibc. It _does_, of course, kill a whole separate set of problems, and I love that. :) I just don't want people to think dropping setuid bits is a magic bullet for solving all local privilege escalations.
(Log in to post comments)
|
|||||||||||||