Vulnerability Development: Re: /dev/urandom | logger "issue"

[Alfonso De Gregorio <dira () SPEEDCOM IT>]

On Wed, 23 Aug 2000, Larry D'Anna wrote:

> Is it possible to get the uid of the process at the other end of a
> unix domain socket?  If so then why not have syslogd get the uid and
> record who logged each message?
Yes, to find the effective uid that called connect() the daemon can
call getpeereuid().

However getpeereuid() is not portable. In Linux it can be implemented
using getsockopt() and SO_PEERCRED. In NetBSD the LOCAL_CREDS feature
does not returns infos until the caller write some data; this lead to
DoS attacks. And so on.

fhex