bsd-init.txt symlink attack
Wouter Van Hemel <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
Hello,
I might already have emailed you a while ago, but allow me to push a bit
to get this fixed. ;)
These lines in the bsd-init.txt hint allow a symlink attack:
echo "Saving random seed to a temporary file..."
/bin/dd if=/dev/urandom of=/tmp/random-seed count=1 bs=512 2>/dev/null
... you might want to save 'random-seed' in a location only root has write
access to, maybe in /var/{spool,run,lib,state,whatever}. Root shouldn't
use public writable dirs, ever.
Sorry for the crosspost, I don't know who I should send this to for a fix.
regards,
wouter
--
Unsubscribe: send email to [email protected]
and put 'unsubscribe lfs-security' in the subject header of the message