Does this address the setuid() bug?

Does this address the setuid() bug?

[Bucky Goldstein]

Seeing as selinix is based on the 2.2.12 kernel, is it affected by the
setuid() bug that plagued kernel versions < 2.2.15 ?

Sorry if this question has been asked before.

TIA,

Bucky Goldstein
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Does this address the setuid() bug?

[Jeremiah Johnson]

Technically it would inherit any bugs fixed in whatever the newest kernel is, unless they where bugs introduced after 2.2.12 and before 2.2.18.  There is also a patch out for 2.2.17 though, so you could use that.

Jeremiah Johnson
Linux Security Analyst
Penguin Computing

On Sat, Dec 23, 2000 at 12:14:05PM -0700, Bucky Goldstein wrote:
> Seeing as selinix is based on the 2.2.12 kernel, is it affected by the
> setuid() bug that plagued kernel versions < 2.2.15 ?
> 
> Sorry if this question has been asked before.
> 
> TIA,
> 
> Bucky Goldstein
> You have received this message because you are subscribed to the selinux list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Does this address the setuid() bug?

[Stephen Smalley]

As mentioned by others, Security-Enhanced Linux does not
fix existing bugs in the Linux kernel but it does provide 
mandatory access controls that can confine the potential
damage that can be caused by such bugs.  The mandatory
access controls are orthogonal to the existing Linux
access control mechanism and are unaffected by the
Unix superuser identity or Linux capabilities.

--
Stephen D. Smalley, NAI Labs
sds@tislabs.com


On Sat, 23 Dec 2000, Bucky Goldstein wrote:

> Seeing as selinix is based on the 2.2.12 kernel, is it affected by the
> setuid() bug that plagued kernel versions < 2.2.15 ?
> 
> Sorry if this question has been asked before.
> 
> TIA,
> 
> Bucky Goldstein
> You have received this message because you are subscribed to the selinux list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
> 

You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.