bug-gnulib
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Fwd: Re: error.c: "Unknown system error" should report errno value


From: John Cowan
Subject: Re: Fwd: Re: error.c: "Unknown system error" should report errno value
Date: Wed, 3 Oct 2007 11:02:39 -0400
User-agent: Mutt/1.5.13 (2006-08-11)

Jim Meyering scripsit:

> What if chroot works for non-privileged users on some type of system?

That sounds extremely unlikely, as it is a great big security hole.
With such a chroot, an unprivileged process could put a fake root around
a setuid program, supplying it with a forged /etc/passwd and tricking
the program into doing something unsavory.  Chroot has required root
privs since it was introduced in 4.2BSD.

-- 
After fixing the Y2K bug in an application:     John Cowan
        WELCOME TO <censored>                   address@hidden
        DATE: MONDAK, JANUARK 1, 1900           http://www.ccil.org/~cowan




reply via email to

[Prev in Thread] Current Thread [Next in Thread]