Heap-based buffer overflow in Sudo

Re:Heap-based buffer overflow in Sudo by MayeulC on Wednesday January 27, 2021 @12:56PM (#25931412)

Thank you for pointing that out :)

If someone would get serious about security, auditing every setuid binary would certainly be something on their list (if they use any). If they really want the functionality, rewriting it to cover just enough of the required functionality wouldn't be unheard of.

[ Parent | on HN ]

Re:Heap-based buffer overflow in Sudo by 0xbadcafebee on Wednesday January 27, 2021 @10:06PM (#25937634)

I agree. But really the security best practice is to remove setuid from all binaries, and rely on RBAC rules (such as with SELinux). That would solve more security issues than anything else, but this is way more effort than most people are willing to invest in security.

[ Parent | on HN ]