[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20230419055256.zhwa4okfxdbsc72z@beesty>
Date: Tue, 18 Apr 2023 22:52:56 -0700
From: nightmare.yeah27@...ecat.org
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2023-2002: Linux Bluetooth: Unauthorized management command
execution
On Tue, Apr 18, 2023 at 02:57:41AM +0200, Solar Designer wrote:
> On Sun, Apr 16, 2023 at 10:57:27PM +0200, Steffen Nurpmeso wrote:
> > You have to do some things, and if you give up privileges
> > thereafter, extended capabilities are gone.
> POSIX saved IDs should help retain/regain the capabilities.
Another (simpler?) way is to fork before giving up privilege.
--
Ian
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
