Mailinglist Archive: opensuse-bugs (4068 mails)

< Previous Next >
[Bug 714632] ipmiutil: use of /var/lock/subsys unsupported

https://bugzilla.novell.com/show_bug.cgi?id=714632

https://bugzilla.novell.com/show_bug.cgi?id=714632#c4


--- Comment #4 from Ludwig Nussel <lnussel@xxxxxxxx> 2011-08-30 14:04:37 CEST
---
/var/run is only writable by root whereas /var/lock is writable by the lock
group. Unauthorized access to the lock group could be gained by exploiting the
setgid lock binary /usr/sbin/lockdev (theoretically, no exploit known atm).
That's only outside the scope of ipmiutil as long as it stays out of /var/lock.

--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >
References