Mailinglist Archive: opensuse-bugs (4068 mails)

< Previous Next >
[Bug 714632] ipmiutil: use of /var/lock/subsys unsupported

--- Comment #4 from Ludwig Nussel <lnussel@xxxxxxxx> 2011-08-30 14:04:37 CEST
/var/run is only writable by root whereas /var/lock is writable by the lock
group. Unauthorized access to the lock group could be gained by exploiting the
setgid lock binary /usr/sbin/lockdev (theoretically, no exploit known atm).
That's only outside the scope of ipmiutil as long as it stays out of /var/lock.

Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >