Re: [gentoo-security] SUID progs

[Ned Ludd]

On Tue, 2004-08-10 at 05:59, Tobias Klausmann wrote:
> Hi!
>
> On Tue, 10 Aug 2004, Alex Efros wrote:
> > But there a number of suid progs which probably don't really need to be suid:
> >
> > -rwsr-x---   1 root     cron          632 ??? 13 05:52 /etc/init.d/dcron
> >
> >     No comments. :(
>
> This is probably a bug in the dcron ebuild. It's not *that* bad
> since programs using the #! hack aren't really executed SUID[*].
> Still, it would be wise to file a bug in Bugzilla about this.

http://bugs.gentoo.org/show_bug.cgi?id=42908


>
> [*] unless you have patched your kernel in that respect.
>
> > -rwsr-xr-x   1 root     root       804924 ??? 13 14:17 /usr/bin/gpg
> >
> >     Yeah, I know, gpg WANT to be suid to do something with protecting it's
> >     memory, but is this really give any benefits? I mean, it's anyway possible
> >     for root to read it's memory from /dev/kmem, and it's anyway impossible to
> >     read it's memory from swap-partition for usual user because permissions
> >     for any disk partitions are 0600.
>
> What about you data landing on a swap partition, not being erased
> and then someone stealing your laptop/harddisk?
>
>
> Greets,
> Tobias
>
> --
> gentoo-security@g.o mailing list
-- 
Ned Ludd <solar@g.o>
Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer