Re: util-linux mount/unmount ASLR bypass via environment variable

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Jan 12, 2018 at 11:15:59AM +0100, Karel Zak wrote:
> Good point. Fixed, now for SUIDs it's without the addresses:
>
> $ LIBMOUNT_DEBUG=all mount
> 18622: libmount:      CXT: ----> allocate [RESTRICTED]
> 18622: libmount:      TAB: alloc
> ...

Would it be useful to warn that addresses are being hidden?  People
might not realize they're missing out on that when debugging.

Especially relevant if the addresses are useful for bug reports,
rather than just for use with a local debugger or something.
(In that case people probably run sudo gdb mount rather than attaching
to a running SUID mount process.)

-- 
#define X(x,y) x##y
Peter Cordes ;  e-mail: X(peter@cor , des.ca)

"The gods confound the man who first found out how to distinguish the hours!
 Confound him, too, who in this place set up a sundial, to cut and hack
 my day so wretchedly into small pieces!" -- Plautus, 200 BC
--
To unsubscribe from this list: send the line "unsubscribe util-linux" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux