Stack Smashing and no-exec

Trever Adams (highlander@teleteam.net)
Thu, 06 Aug 1998 22:15:08 -0500


It is my understanding that if the app is not running as root (whether
that is setuid or real root) the app can't gain root. If such is the
case, I disagree with those who say it is the kernel's responsibility to
keep the system safe. Root is supreme, root is the OS in many ways. If
root takes the system down, heck, that is roots fault. So the mentality
that the OS should protect root from himself (note generic him, none of
the PC crap) is bogus.

If an app can smash its stack and gain root shell without setuid or
root, then it is a problem. If such is the case, please let me know.

Trever

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html