| |||||||||||||
A story of three kernel vulnerabilitiesA story of three kernel vulnerabilitiesPosted Feb 20, 2013 16:07 UTC (Wed) by drag (subscriber, #31333)In reply to: A story of three kernel vulnerabilities by drag Parent article: A story of three kernel vulnerabilities
Oh and as far as 'userspace vs kernelspace', since all this stuff requires root privileges to do, unless you want to depend entirely on GVFS and whatnot, then any exploit that gives you root access gives you kernel access. Pretty much same different, unfortunately.
(Log in to post comments)
A story of three kernel vulnerabilities Posted Feb 21, 2013 19:40 UTC (Thu) by alonz (subscriber, #815) [Link] The only setuid binary involved with using FUSE is "fusermount", which only opens /dev/fuse and immediately drops privilege. The filesystem handler itself runs as an unprivileged user.So I, for one, really don't get your point.
|
|||||||||||||