[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20230315104035.4b48f27d.hanno@hboeck.de>
Date: Wed, 15 Mar 2023 10:40:35 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: Re: TTY pushback vulnerabilities / TIOCSTI
On Wed, 15 Mar 2023 20:03:11 +1100 (EST)
Dave Horsfall <dave@...sfall.org> wrote:
> I hate tossing out functionality; would you not make it a privileged
> operation instead?
From a security perspective tossing out functionality is the better
option compared to restricting access. If there is practically no use
of that functionality and it's mostly a security risk, then removing it
is the right choice.
Reducing complexity is a good principle for IT security.
--
Hanno Böck
https://hboeck.de/
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
