[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debconf and noexec on /tmp



Previously Ethan Benson wrote:
> 1: if your system is vulnerable to script kiddies then admin needs to
>    be taken out back and beaten with a large LART.

Sure, but I don't mind having a hopefully completely redundant extra
layer in there.

> 2: if the script kiddie even has 2 tenths of a percent of clue he will
>    figure out how to move the file somewhere else, or use my earlier
>    mentiond ld//bin/sh method of execution.

You overestimate scriptkiddies.

Wichert.

-- 
  _________________________________________________________________
 /wichert@wiggy.net         This space intentionally left occupied \
| wichert@deephackmode.org            http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |



Reply to: