Re: Feature request: type_user_owner_def_fd_create after chown

Amon Ott <[email protected]>
Newsgroups gmane.linux.rsbac
Message-ID <[email protected]> 
On Sunday 18 January 2009 wrote Javier J. Martínez Cabezón:
> could close one attack vector from root (for example with TIOCSTI
> ioctl).

TIOCSTI has its own request type on DEV: SEND

So that attack vector should be no problem, by default it should be denied to 
anyone. What other vectors do you think are there?

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.