owl-users - Re: Next Release

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 23 Apr 2003 03:01:00 +0400
From: Solar Designer <solar@...nwall.com>
To: owl-users@...ts.openwall.com
Subject: Re: Next Release

On Tue, Apr 22, 2003 at 03:17:15PM -0500, Steve Bremer wrote:
> Is it possible in 2.2.x to have ping and traceroute use capabilities
> and drop all other root privs shortly after startup?

They do already, -- before even parsing command line options.  And
this doesn't require capabilities, only a raw socket fd is kept.

But the real danger here isn't with ping and traceroute themselves,
but rather with generic SUID/SGID program startup code: in libc, in
the dynamic linker, and even in the kernel itself.  While the kernel
is highly privileged either way, there may still be logic errors in it
where the executing program's new effective credentials would be
leaked or misused.  We've seen several kernel vulnerabilities of this
nature in the past.

-- 
/sd