Re: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4)

From: Andrew G. Morgan
Date: Mon Jan 18 2010 - 11:04:40 EST

On Mon, Jan 18, 2010 at 4:54 AM, <Valdis.Kletnieks@xxxxxx> wrote:
> (Interestingly enough, the capabilities bug came *later*:
> 8.12.1/8.12.1   2001/10/01
>        SECURITY: Check whether dropping group privileges actually succeeded
>                to avoid possible compromises of the mail system by
>                supplying bogus data.  Add configuration options for
>                different set*gid() calls to reset saved gid.  Problem
>                found by Michal Zalewski.
> and was mostly an issue because the same problem existed in pre-8.12 sendmails
> that were still setuid and hadn't upgraded yet...

I think the above was 'a' sendmail bug. 'The' capabilities bug came before that:


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at