|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: Here's another glibc env. var.
From: harada
obunsha.co.jpDate: Wed May 24 2000 - 22:01:52 CDT
- Next message: Solar Designer: "Re: Exploiting overflow of heap-based buffers"
- Previous message: Alan Cox: "THe Glibc malloc debug"
- Maybe in reply to: Chris Evans: "Here's another glibc env. var."
- Next in thread: David Luyer: "Re: Here's another glibc env. var."
- Maybe reply: haradaobunsha.co.jp: "Re: Here's another glibc env. var."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
>(In fact, it is probably a good thing to motivate people to avoid putting
>user-friendly junk into setuid programs...)
You're removing needed functionality to get around programming errors.
Why is being able to use another language for messages from suid programs
"user-friendly junk"? I would think that it'd be better, security-wise, to
potentially give the user information in their own language, rather than
just spitting out English that they may or may not be able to read.
Bruce Harada
- Next message: Solar Designer: "Re: Exploiting overflow of heap-based buffers"
- Previous message: Alan Cox: "THe Glibc malloc debug"
- Maybe in reply to: Chris Evans: "Here's another glibc env. var."
- Next in thread: David Luyer: "Re: Here's another glibc env. var."
- Maybe reply: haradaobunsha.co.jp: "Re: Here's another glibc env. var."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]