[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    kdenonbeta/icecream/icecream
From:       Stephan Kulow <coolo () kde ! org>
Date:       2004-08-28 7:55:51
Message-ID: 20040828075551.958569003 () office ! kde ! org
[Download RAW message or body]

CVS commit by coolo: 

making it _way_ harder to accuse me of having caused a rootkit:
* changed the -u option to a -r option (still useful for homogenous networks)
* added -u <nobody_uid> (defaults to 65534) that it runs all processes under
  that handle any client data.

So now the compilations runs as nobody in a chroot environment together with
the "rootkit", this should make a sniffing attack quite complex, but of course
it still allows DoS (even though the memory usage is limited and the CPU usage
is niced).


  M +0 -1      TODO   1.46
  M +133 -79   daemon/environment.cpp   1.18
  M +7 -3      daemon/environment.h   1.8
  M +23 -9     daemon/main.cpp   1.98
  M +4 -1      daemon/serve.cpp   1.53
  M +3 -1      daemon/serve.h   1.14



[prev in list] [next in list] [prev in thread] [next in thread]