logo       

Re: RFC: linux backdoor prevention: msg#00045

Subject: Re: RFC: linux backdoor prevention
Em Mon, Nov 10, 2003 at 11:24:26AM +0100, Walter Harms escreveu:
> 
> Hi list,
> i have read about the linux backdoor, nice trick.
> A simple solution to *that* kind of dirty tricks would
> be to remove any A = B from if statements so somebody can
> write a RE to track hidden initialisations in if statements.
> 
> of cause this will not solve the problem but help to reduce complexity of 
> finding current->uid=0 (and friends). It may
> even uncover hidden bugs. ( i dont like if (ret=foo())<0) and friends).
> 
> any comments ?

I don't like as well, and as much as I can I remove such things in my code and
in other areas that I send patches, but I don't think Linus is willing to accept
such patches at this time, perhaps in 2.7.

- Arnaldo


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/


<Prev in Thread] Current Thread [Next in Thread>