LXer: Critical Linux vulnerability imperils users, even after silent fix

LXer · 05-16-2013, 02:50 PM

Published at LXer:

For more than two years, the Linux operating system has contained a high-severity vulnerability that gives untrusted users with restricted accounts nearly unfettered "root" access over machines, including servers running in shared Web hosting facilities and other sensitive environments. Surprisingly, most users remain wide open even now, more than a month after maintainers of the open-source OS quietly released an update that patched the gaping hole.

Read More...

jefro · 05-16-2013, 08:24 PM

It has never been a high issue with linux to force security or rather "enforce" security by default. I just look back in time to when nothing had any security on it at all. What were we thinking? It is way past time to correct that mistake.

Good reason to be using a FreeBSD kernel??

H_TeXMeX_H · 05-17-2013, 02:45 AM

Code:

bash-4.2$ compile semtex.c 
bash-4.2$ ./semtex 
semtex: semtex.c:51: sheep: Assertion `!close(fd)' failed.
Aborted
bash-4.2$ grep 'CONFIG_PERF_EVENTS' /boot/config
CONFIG_PERF_EVENTS=y
bash-4.2$ uname -r
3.4.45

I suppose this means it didn't work ...