Re: ptrace fix in 2.4

On Mon, May 12, 2003 at 03:10:05AM +0200, Peter Holm wrote: > On Fri, 09 May 2003 14:10:05 +0200, in linux.debian.security you > wrote: > > >Yesterday Bernhard Kaindl committed a cleanup patch addressing > >numerous problems encountered with the original ptrace fix. > >Now it should be in -rc2. F

Re: ptrace fix in 2.4

Hi, first let me thank you very much for answering my question! It´s just the special ptrace-bug situation, that makes me dive deeper into these things I usually do not touch, so I am really happy with someone giving me some hints! >However, it seems easier to start from the other direction: >dow

Kernel 2.4.21-rc2 still vulnarable or am I doing something wrong?

Hi, sorry for being so penetrating about this issue. I have some really obscure thing here. I downloaded http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.20.tar.bz2 http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.21-rc2.bz2 to get rid of that ptrace bug. ok, I compiled it u

Re: Kernel 2.4.21-rc2 still vulnarable or am I doing something wrong?

On Tuesday 13 May 2003 06:11 am, Peter Holm wrote: > Did I something wrong? Or is this exploit, if not for a root shell, > still good for a local DOS? Yes, any user on any system may use all of the available CPU time unless the administrator has placed limits on them doing so. Presumably the exp