Re: Linux kernel setgid implementation flaw

From: Wietse Venema (wietseat_private)
Date: Fri Jul 19 2002 - 09:48:49 PDT

  • Next message: Russell Mann: "RE: Norton AV 2002 rewriting SMTP, breaking TLS" 

    FYI,

The August USENIX Security conference has a good paper that examines
in depth the semantics of UID and GID setting calls for Solaris,
FreeBSD and Linux. The differences are quite remarkable.

	Wietse

Setuid Demystified, by Hao Chen, David Wagner, UC Berkeley; Drew
Dean, SRI International
www.cs.berkeley.edu/~daw/papers/setuid-usenix02.pdf

    This archive was generated by hypermail 2b30 : Fri Jul 19 2002 - 11:06:39 PDT