[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#158090: security.debian.org: Easy for any user to fake messages into syslog



Martin Schulze <joey@infodrom.org> writes:

> However, those who would like to see such a feature, should be free
> to patch their glibc and use it.

Eh, you don't have to patch libc, you'd have to patch syslogd (and
possibly the kernel, but maybe you could obtain trustworthy
information from /proc without kernel modification).

-- 
Florian Weimer 	                  Weimer@CERT.Uni-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898



Reply to: