Full Disclosure mailing list archives

Re: Re: hard links on Linux create local DoS vulnerability and security problems


From: Christopher Allene <cwis () nerim fr>
Date: Thu, 27 Nov 2003 02:57:59 +0100

Jeremiah Cornelius (jeremiah () nur net) wrote on 2003-11-26 at 14:18:
And a mandatory system profile in /etc , which aliases ln as 'ln -s' might 
help.  One for each valid shell.

How would such an approach avoid people calling symlink(2) or
unalias/whatever ?

Seems as good as security through obscurity to me.

-- 
Christopher Allène

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: