Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 10 Jul 2012 15:09:13 +0200
From: Sebastian Krahmer <>
Subject: libdbus hardening


We are going to add a libdbus hardening patch:

This is because some suid binaries (Xorg and others) are linked against libdbus and
it seems not right to allow users to route polkit or other
system messages to a fake dbusd via $DBUS_SYSTEM_BUS_ADDRESS.

If anyone has a better patch or something even easier, just let us know.

There are certainly also other libs that will receive a patch.



~ perl
~ $_='print"\$_=\47$_\47;eval"';eval
~ - SuSE Security Team

SUSE LINUX Products GmbH,
GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5
90409 Nürnberg

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ