Insecurity in linux boot

christophe.leroy5@capway.com
Tue, 12 Jan 1999 16:58:09 +0100

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Simon: "Offtopic: Newbie: Polling delay and how to do it?"
Previous message: Marcin Dalecki: "Re: C++ in kernel"

At the end of boot, Linux kernel tries to fork init.
If it fails, /bin/sh is forked.
It means that If someone can alter init (with a tmp race for
example), then reboot, it will have all access to the system.

I think that /bin/sh should only be forked when asked at boot time
with init= parameter (its use beeing protected by lilo password)

christophe

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

Next message: Simon: "Offtopic: Newbie: Polling delay and how to do it?"
Previous message: Marcin Dalecki: "Re: C++ in kernel"