News for hackers. Stuff that matters.

A comment on Sudo: Heap-based overflow with small passwords. Parent comment

Re:Sudo: Heap-based overflow with small passwords by user3939382 on Friday November 04, 2022 @09:56AM (#33466738)
> communicate which sort of permissions are needed

OpenBSD has something like this https://man.openbsd.org/pledge.2

[ Parent | on HN ]
Re:Sudo: Heap-based overflow with small passwords by unsafecast on Friday November 04, 2022 @11:09AM (#33467999)
Unfortunately not. Pledge is _awesome_, but it's a different thing.

Pledge protects the system from buggy well-intentioned, cooperative software that could have bugs. What's needed is something that protects the system from ill-intentioned, uncooperative software.

[ Parent | on HN ]
Re:Sudo: Heap-based overflow with small passwords by unsafecast on Friday November 04, 2022 @03:41PM (#33472640)
> buggy well-intentioned, cooperative software that could have bugs

Ugh, that's what I get for not reading before clicking submit...

[ Parent | on HN ]