[prev in list] [next in list] [prev in thread] [next in thread]
List: oss-security
Subject: [oss-security] Re: xscreensaver package caps gets raw socket
From: Tavis Ormandy <taviso () gmail ! com>
Date: 2021-04-17 14:41:15
Message-ID: 20210417144115.GA3514 () thinkstation
[Download RAW message or body]
On Sat, Apr 17, 2021 at 07:31:05AM -0700, Tavis Ormandy wrote:
> - The code could use ping sockets instead, but they're still rarely
> enabled by default, and users have to set the ping_group_range sysctl.
> I personally think it's time to enable them by default, but that's a
> different discussion :-)
>
Oh, I also pitched using popen("/bin/ping" ..), but I think nobody is
really convinced that will work, but I kinda like it :)
Tavis.
--
_o) $ lynx lock.cmpxchg8b.com
/\\ _o) _o) $ finger taviso@sdf.org
_\_V _( ) _( ) @taviso
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic