Re: drop privileges to nobody is pinging as root
This is a discussion on Re: drop privileges to nobody is pinging as root within the lucky.openbsd.tech forums, part of the OpenBSD category; --> > Theo de Raadt wrote: > > Han wrote: > > > To further improve security I think this ...
| |||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
02-22-2008, 01:09 PM
| ||||
| ||||
 Re: drop privileges to nobody is pinging as root > Theo de Raadt wrote: > > Han wrote: > > > To further improve security I think this patch may help. > > > > This does not help. In fact, it potentially gives the person > > running ping access to another uid. > > > > You need to think about why we do it as we do, throughout the > > tree. > > Care to elaborate? I have been rather clear. Please read what I wrote, and then think. This happens all the time. Why do people ask again, instead of thinking? WHY should any user be able to run a process as uid nobody? Do you really think that uid nobody has no capabilities that the user doesn't have?      |
Linear Mode
