Messages in this thread | | | Subject | Re: mprotect abuse in slim | From | Valdis.Kletnieks@vt ... | Date | Tue, 09 Jan 2007 14:27:19 -0500 |
| |
On Mon, 08 Jan 2007 17:38:25 EST, Mimi Zohar said:
> revoked. Based on previous comments on lkml, we understand > that this is not really possible in general, so SLIM only > attempts to revoke access in certain simple cases.
Which, unfortunately, creates incredibly brittle code when some attacker reads the SLIM source code and finds a way to force the non-simple case you ignore.
This is an area where you really need to do it *right*, or not at all. [unhandled content-type:application/pgp-signature] | |