[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Re: hard links on Linux create local DoS vulnerability and security problems



Jeremiah Cornelius (jeremiah@nur.net) wrote on 2003-11-26 at 14:18:
> And a mandatory system profile in /etc , which aliases ln as 'ln -s' might 
> help.  One for each valid shell.

How would such an approach avoid people calling symlink(2) or
unalias/whatever ?

Seems as good as security through obscurity to me.

-- 
Christopher Allène

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html