oss-sec mailing list archives

Re: Healing the bash fork


From: "Kobrin, Eric" <ekobrin () akamai com>
Date: Tue, 30 Sep 2014 08:41:24 -0500

"innocuous looking setuid program" made my day ;)

We should take care not to blame all and everything to bash.

I don't find that blame is a useful tool for fixing security problems. What's more interesting to me is: what system 
components are in a position to help. If a change in bash can make a bunch of "innocuous looking setuid programs" not 
be  vectors for the import of malicious functions, let's do it.

Current thread: