OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: glibc env. vars. (again)
From: Alan Cox (alanlxorguk.ukuu.org.uk)
Date: Wed May 24 2000 - 16:12:09 CDT

> Conclusions, as I see them:
> * we need a sysctl to turn suid / /dev/null hooking on and off

No we need non stupid glibc bugs.

> * glibc probably shouldn't allow this

probably ??? definitely.

Thats a glibc security hole period