Bug#878952: [pkg-gnupg-maint] Bug#878952: scdaemon: avoid ptrace on scdaemon?

2017-10-28 Thread Daniel Kahn Gillmor
Control: found 878952 2.1.18-8~deb9u1 On Wed 2017-10-25 16:46:51 +0900, NIIBE Yutaka wrote: > Daniel Kahn Gillmor wrote: >> Package: scdaemon >> Version: 2.2.1-2 >> Severity: normal > [...] >> Should we add a similar "prctl(PR_SET_DUMPABLE, 0)" to scdaemon as >> well? > >

Bug#878952: [pkg-gnupg-maint] Bug#878952: scdaemon: avoid ptrace on scdaemon?

2017-10-27 Thread Daniel Kahn Gillmor
Control: tags 878952 + confirmed pending On Wed 2017-10-25 16:46:51 +0900, NIIBE Yutaka wrote: > Daniel Kahn Gillmor wrote: >> Package: scdaemon >> Version: 2.2.1-2 >> Severity: normal > [...] >> Should we add a similar "prctl(PR_SET_DUMPABLE, 0)" to scdaemon as >> well?

Bug#878952: [pkg-gnupg-maint] Bug#878952: scdaemon: avoid ptrace on scdaemon?

2017-10-25 Thread NIIBE Yutaka
Daniel Kahn Gillmor wrote: > Package: scdaemon > Version: 2.2.1-2 > Severity: normal [...] > Should we add a similar "prctl(PR_SET_DUMPABLE, 0)" to scdaemon as > well? I think we should. Or else, someone might confuse as if the specific attack condition is somehow