Bugtraq mailing list archives
Re: Unprivilegued settings for FreeBSD kernel variables
From: "Eygene A. Ryabinkin" <rea () rea mbslab kiae ru>
Date: Thu, 17 Jun 2004 18:33:49 +0400
On Tue, Jun 15, 2004 at 09:01:13PM +0200, Dag-Erling Sm?rgrav wrote:
I've already told you that there is no such threat, since the attack you describe can only be initiated by someone who already has unrestricted access. Please stop wasting everybody's time.
You are wrong. Unrestricted access means _really unrestricted_ and kernel securelevel restricts access to certain places even to root. IMHO, it's dagerous bug, because some administrators can think "...hmm, I've enabled the hardest securelevel and even if a hacker would break into my host with r00t privileges he will be restricted in certain ways. The only thing he can do is to change /etc/rc.conf (for example) and _reboot_ my host. But I will notice the reboot." So, for certain people the following formulae may hold: Hardest securelevel + no reboots = good security. But this bug changes things. One can lower securelevel, do some nasty things and raise it again _without reboots_. So, as I've already noted, you are wrong. The bug _gives_ you almost unrestricted access. rea
Current thread:
- Unprivilegued settings for FreeBSD kernel variables Radko Keves (Jun 15)
- Re: Unprivilegued settings for FreeBSD kernel variables Dag-Erling Smørgrav (Jun 16)
- Re: Unprivilegued settings for FreeBSD kernel variables Eygene A. Ryabinkin (Jun 18)
- Re: Unprivilegued settings for FreeBSD kernel variables Jason V. Miller (Jun 18)
- Re: Unprivilegued settings for FreeBSD kernel variables Christian Ullrich (Jun 18)
- Re: Unprivilegued settings for FreeBSD kernel variables Ivaylo Kostadinov (Jun 18)
- Re: Unprivilegued settings for FreeBSD kernel variables Eygene A. Ryabinkin (Jun 18)
- Re: Unprivilegued settings for FreeBSD kernel variables Manuel Bouyer (Jun 18)
- Re: Unprivilegued settings for FreeBSD kernel variables Valdis . Kletnieks (Jun 19)
- Re: Unprivilegued settings for FreeBSD kernel variables Wietse Venema (Jun 22)
- Re: Unprivilegued settings for FreeBSD kernel variables Henning Brauer (Jun 19)
- Re: Unprivilegued settings for FreeBSD kernel variables Valdis . Kletnieks (Jun 19)
- Re: Unprivilegued settings for FreeBSD kernel variables Jason V. Miller (Jun 21)
- <Possible follow-ups>
- Re: Unprivilegued settings for FreeBSD kernel variables blexim (Jun 20)
- Re: Unprivilegued settings for FreeBSD kernel variables Dag-Erling Smørgrav (Jun 16)