[linux-audio-dev] LSM: Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation

Lee Revell rlrevell at joe-job.com
Tue Dec 28 21:46:07 UTC 2004


On Tue, 2004-12-28 at 22:36 +0100, Frank Barknecht wrote:
> Hallo,
> Fernando Lopez-Lezcano hat gesagt: // Fernando Lopez-Lezcano wrote:
> 
> > On Tue, 2004-12-28 at 12:28, Lee Revell wrote:
> > > On Mon, 2004-12-27 at 14:41 +0100, Frank Barknecht wrote:
> > > > Read on here:
> > > > http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-12/0390.html
> > > 
> > > Wow, this is a HORRIBLE bug.
> > 
> > Indeed. I tried it and it works. Someone should have been pointing a
> > camera at me to capture the "moment" :-) Spent the better part of
> > yesterday building new Planet CCRMA kernels without this "feature".
> 
> Oh, it seems to be not *that* bad, however. See this discussion on the
> linux-security-module list: http://tinyurl.com/5ey2b

Well, just because the NSA guy would not do that on his system, does not
mean it isn't a problem for Joe User. ;-)

Lee




More information about the Linux-audio-dev mailing list