| |||||||||||||
Remote root hole in SambaRemote root hole in SambaPosted Apr 11, 2012 17:17 UTC (Wed) by Cyberax (✭ supporter ✭, #52523)In reply to: Remote root hole in Samba by drag Parent article: Remote root hole in Samba
Systrace (as all other generic syscall wrappers) is vulnerable to concurrent attacks.
(Log in to post comments)
Remote root hole in Samba Posted Apr 14, 2012 20:37 UTC (Sat) by andres (guest, #83358) [Link]
Your last two posts in this thread clearly show you have no idea what you're talking about.
systrace is only "vunerable" to TOCTOU/TOATOU if your policy involves checking pointer arguments.
systrace policies such as ssh's block entire syscalls outright; they don't check arguments. As such, those policies are not vulnerable.
|
|||||||||||||