n/rdisc6 immediately drop privileges (and check the results), so I have
no problem with them being setuid, however, the daemon does not check
return codes of setgid or setuidor initgroups (rdnssd.c
drop_privileges()). This is almost CVE worthy, and needs to be fixed
before it would go into main. Outside of that, the initial design looks
good (split root/non-root server, etc).
** Changed in: ndisc6 (Ubuntu)
Status: New => Incomplete
** Changed in: ndisc6 (Ubuntu)
Assignee: Kees Cook (kees) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/806723
Title:
[MIR] ndisc6
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ndisc6/+bug/806723/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
