logo       

RFC: linux backdoor prevention: msg#00044

Subject: RFC: linux backdoor prevention
Hi list,
i have read about the linux backdoor, nice trick.
A simple solution to *that* kind of dirty tricks would
be to remove any A = B from if statements so somebody can
write a RE to track hidden initialisations in if statements.

of cause this will not solve the problem but help to reduce complexity of 
finding current->uid=0 (and friends). It may
even uncover hidden bugs. ( i dont like if (ret=foo())<0) and friends).

any comments ?

walter




-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/


<Prev in Thread] Current Thread [Next in Thread>