OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Postfix local privilege escalation via hardlinked symlinks

From: Wietse Venema (wietseporcupine.org)
Date: Tue Aug 19 2008 - 06:07:59 CDT


Matthias Andree:
> If Postfix (or qmail[1], or whatever application) claims to support a
> particular operating system (Linux, Solaris - rather than POSIX), then
> it has to make proper assumptions to work in that possibly different
> environment that Postfix claims to support, rather than blame the OS for
> change, development, its developers for design decisions, or whatever.

By this reasoning, I would have to evaluate kernel implementations
forever, for all the supported systems, just in case someone decides
to change the semantics of a system call and while still claiming
that link(2) is POSIX conformant.

Likewise, I would have to evaluate ANSI C environments and ensure
that some implementation does not introduce a change.

That is obviously not practical.

        Wietse