sm-grimoire AT lists.ibiblio.org
Subject: Discussion of Spells and Grimoire items
List archive
- From: Sergey A Lipnevich <sergeyli AT pisem.net>
- To: eric AT sandall.us
- Cc: Source Mage - Grimoire <sm-grimoire AT lists.ibiblio.org>
- Subject: Re: [SM-Grimoire]Security hole + fix for /tmp
- Date: Mon, 07 Oct 2002 15:09:24 -0400
sorcery creates scripts like /tmp/sorcery-update.sh in there, AFAIR. They'll need to be copied somewhere to be executed, or sourced?
Eric Sandall wrote:
This article brings up a good point when mounting /tmp.
http://online.securityfocus.com/columnists/109
Here's the important part ;) :
"What could I have done to protect my systems? Not wait five weeks to
install security updates, for one thing. For another, as Sandu Mihai
points out on Bugtraq, simply mounting the /tmp directory with noexec and
nosuid will block this worm and a great many other attacks."
Perhaps we should update our /etc/fstab's to do this? And make it so on
the new ISO (when it's out)?
-One of Four
a.k.a. sandalle
-
[SM-Grimoire]Security hole + fix for /tmp,
Eric Sandall, 10/07/2002
-
Re: [SM-Grimoire]Security hole + fix for /tmp,
Sergey A Lipnevich, 10/07/2002
- Re: [SM-Grimoire]Security hole + fix for /tmp, Julian v. Bock, 10/07/2002
- Re: [SM-Grimoire]Security hole + fix for /tmp, Dufflebunk, 10/07/2002
-
Re: [SM-Grimoire]Security hole + fix for /tmp,
Sergey A Lipnevich, 10/07/2002
Archive powered by MHonArc 2.6.24.