Sean Collins on 30 Nov 2009 18:52:58 -0800 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heads up PLUG: We've got a huge local root hole. Think back to the vmsplice local root exploit two years ago on linux. Yeah, it's that easy. http://lists.freebsd.org/pipermail/freebsd-security/2009-December/005369.html Thankfully, all my services are run inside jailed environments, so even if they break root they were confined to that jail. The main system runs no services and has public-key only ssh. If anyone else needs help patching their systems, hit me up and I'll be happy to help. Thank You, Sean Collins -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.12 (Darwin) iEYEARECAAYFAksUhLsACgkQ9g9WSXiROTFkdQCghlQyb5hdUONziHZuXaA+quqh CugAniGl5hwkKh4RuRoiRgawyHxlKqs8 =RBAv -----END PGP SIGNATURE----- ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|