Re: noexec on /dev/shm

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 03.01.11 22:12, Bernie Innocenti (bernie@xxxxxxxxxxx) wrote:

> On my desktop, abstract namespace sockets are twice more popular than
> the regular ones:
> 
>  bernie@giskard:~$ netstat -ax | grep @ | wc -l
>  151
>  bernie@giskard:~$ netstat -ax  | grep -v @ | grep / | wc -l
>  73
> 
> Most uses are from dbus, but I'm also seeing gnome-session and
> gvfsd-trash.

Of these being used, dbus is correctly implemented, since it randomizes
the socket name. Same for gdm.

Misusing are ICE, X11, nspluginwrapper at least, since they do not use a
random socket name but a fixed one, hence opening the door to DoS attacks.

Lennart

-- 
Lennart Poettering - Red Hat, Inc.
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux