OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: /dev/{km,m}em worries

Re: /dev/{km,m}em worries

Jim Thompson (jimtadpole.com)
Tue, 17 May 94 17:01:31 CDT

> My solution was simply chmod 700 /etc/crash on all my systems.   Root
> is the only one that needs it anyway....

Obviously nobody at your site debugs crashed kernels...
(Or they don't use crash.)

Its enough to just take the sgid bit off the inode.
# chmod 511 /etc/crash

Jim