Re: Owning privileged processes under UnixWare

[aleph1 () SECURITYFOCUS COM (Elias Levy)]

It seems the basic problem is that SCO has implemented privileges in
UnixWare without thinking of possible interaction with other subsystems.
They should have placed the same restriction on application running with
privileges as those placed on applications running suid or sgid. I am
surprised no one before noticed this. Its a hole you could drive a truck
through. The engineers that coded the privilege system (a security subsystem!)
should get a good ass chewing or get fired.

--
Elias Levy
Security Focus
http://www.securityfocus.com/