News for hackers. Stuff that matters.
Re:Don't tug on that, you never know what it might be attach... by ars on Friday July 01, 2016 @08:24PM (#12020743)
> the dynamic loader was sanitising something irrelevant to the actual capability granted

No. You can theoretically use tmp to gain any privilege. So anything extra at all must be blocked.

Re:Don't tug on that, you never know what it might be attach... by wtbob on Friday July 01, 2016 @10:19PM (#12021082)
> You can theoretically use tmp to gain any privilege.

Not when you access it as yourself rather than root. The capability in question only grants access to open low ports; there's no way to combine that with files in a temp directory to get root.