Updated Anti-Trojan kernel patches for OpenBSD
"Michael A. Williams" <[email protected]>
| Newsgroups | gmane.os.openbsd.security.announce |
|---|---|
| Message-ID | <[email protected]> |
Hi, Apologies for such a quick update, Incorrect handling of the securelevel whereby the test for secure level of 1 or 2 did not account for secure level greater then 2 has been changed to test for secure level >= the desired value. As correctly pointed out by Brett Lymn this would allow for a secure level change above 2 with a result of disabling the signed_exec functionality. Thanks Brett. An updated reference implementation for OpenBSD 3.0 is available at: http://www.trojanproof.org/sigexec-obsd3.0r-0.3.tgz Regards, -- Michael A. Williams Security Software Engineering and InfoSec Manager NetXSecure NZ Limited, http://www.nxs.co.nz Ph: +64.3.318.2973 Fax: +64.3.318.2975 Mob: +64.21.995.914