Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
If your 2.6.37 to 3.8.8 kernel is compiled with CONFIG_PERF_EVENTS
114 views
Skip to first unread message
J G Miller
May 17, 2013, 12:45:00 PM5/17/13
to
If your 2.6.37 to 3.8.8 kernel is compiled with CONFIG_PERF_EVENTS,
then you really, really need to take a look at this article.
<http://arstechnica.COM/security/2013/05/critical-linux-vulnerability-imperils-users-even-after-silent-fix/>
The criticism of the Linux kernel developers continuing policy of not
publicising critical security fixes is also worth reading.
crankypuss
May 17, 2013, 4:48:58 PM5/17/13
to
What are the privileged accounts they're talking about, are those
"sodoers" or something else?
Jasen Betts
May 17, 2013, 7:49:15 PM5/17/13
to
--
⚂⚃ 100% natural
--- news://freenews.netfront.net/ - complaints: ne...@netfront.net ---
crankypuss
May 18, 2013, 6:31:21 AM5/18/13
to
On 05/17/2013 05:49 PM, Jasen Betts wrote:
> On 2013-05-17, crankypuss <crank...@nomail.invalid> wrote:
>> On 05/17/2013 10:45 AM, J G Miller wrote:
>>>
>>> If your 2.6.37 to 3.8.8 kernel is compiled with CONFIG_PERF_EVENTS,
>>> then you really, really need to take a look at this article.
>>>
>>> <http://arstechnica.COM/security/2013/05/critical-linux-vulnerability-imperils-users-even-after-silent-fix/>
>>>
>>> The criticism of the Linux kernel developers continuing policy of not
>>> publicising critical security fixes is also worth reading.
>>>
>>
>> Okay, I looked at the words, but I'm not sure I understood what I read.
>>
>> What are the privileged accounts they're talking about, are those
>> "sodoers" or something else?
>
> It's basically about "getting root" by tricking the kernel.
>
I saw the part about some bozo not checking buffer extents. Thought it
> On 2013-05-17, crankypuss <crank...@nomail.invalid> wrote:
>> On 05/17/2013 10:45 AM, J G Miller wrote:
>>>
>>> If your 2.6.37 to 3.8.8 kernel is compiled with CONFIG_PERF_EVENTS,
>>> then you really, really need to take a look at this article.
>>>
>>> <http://arstechnica.COM/security/2013/05/critical-linux-vulnerability-imperils-users-even-after-silent-fix/>
>>>
>>> The criticism of the Linux kernel developers continuing policy of not
>>> publicising critical security fixes is also worth reading.
>>>
>>
>> Okay, I looked at the words, but I'm not sure I understood what I read.
>>
>> What are the privileged accounts they're talking about, are those
>> "sodoers" or something else?
>
> It's basically about "getting root" by tricking the kernel.
>
had something to do with "privileged users". <shrug>
0 new messages