News for hackers. Stuff that matters.

A comment on XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable.". Parent comment

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by jeroenhd on Monday April 01, 2024 @05:06AM (#39892065)
By design, OpenSSH will start an interactive shell with either the capabilities to escalate to root or direct root permissions. I don't think pledge/unveil will work any better than seccomp already does.

I do like the pledge/unveil API, but I don't think it would've made much of a difference.

[ Parent | on HN ]

There are no comments on this comment yet.