Re: local root on linux 2.2.15

[jeffd () EVCOM NET (Jeff Dafoe)]

> IMHO, all those setuid-root programs should be fixed if they ignore return
> values of system calls.

        Quote from sendmail security team advisory:

=====
Note that checking the return value from setuid() is insufficient;
the setuid(getuid()) succeeds even when the process does not have
"appropriate privileges."
=====

Jeff Dafoe
System Administrator
Evolution Communications, Inc.