30 Aug
2011
30 Aug
'11
12:04
https://bugzilla.novell.com/show_bug.cgi?id=714632 https://bugzilla.novell.com/show_bug.cgi?id=714632#c4 --- Comment #4 from Ludwig Nussel <lnussel@suse.com> 2011-08-30 14:04:37 CEST --- /var/run is only writable by root whereas /var/lock is writable by the lock group. Unauthorized access to the lock group could be gained by exploiting the setgid lock binary /usr/sbin/lockdev (theoretically, no exploit known atm). That's only outside the scope of ipmiutil as long as it stays out of /var/lock. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.