Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Local privilege escalation via execve()

freebsd.org

Post reply on HN
Print view View original

41–50 of 116 posts

Re: Local privilege escalation via execve()

#41

Post by wolvoleo »

stackghost wrote: post #26
loeg wrote: post #15

Earlier quoted context omitted.

[flagged]

A not-insignificant chunk of the userbase of the various BSDs is there because they were turned off of Linux after controversial things like Gnome 3, systemd being shoved down users' throats despite being a broken mess, wayland (though nobody was as arrogant about wayland as Poettering was about systemd), etc. All that to say, the BSD userbase as a sizeable subset that are there for countercultural reasons, rather th…

I wouldn't call it countercultural. And Wayland actually runs on freebsd these days.

I use Linux as well but I really like FreeBSD for a number of technical reasons. Like the ports collection, the jails, the first-class citizen ZFS.

And Gnome 3 doesn't really have anything to do with Linux. It is also available for FreeBSD if you want it (I don't, I hate the minimalist opinionated design style so I use KDE, also on Linux).

But I use Linux on servers where I run docker for example. It's not about "not using linux".

Re: Local privilege escalation via execve()

#42

Post by paulddraper »

itsthefrank wrote: post #3
rvz wrote: post #2

> IV. Workaround > No workaround is available. Oh dear.

> V. Solution > Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date, and reboot the system. Not everyone can just freebsd-update and reboot, so yes, "Oh dear." is a good response to this.

What prevents it?

Re: Local privilege escalation via execve()

#43

Post by wolvoleo »

cyberpunk wrote: post #36
icedchai wrote: post #30

Earlier quoted context omitted.

I also use a mix. I moved to FreeBSD initially after a rough period w/Linux in the late 90's. Today, my FreeBSD machines are all VMs running on Linux hosts!

Hah I'm your mirror version -- my linux machines are all VMs running on FreeBSD hosts!

Oh you use bhyve?

I've tried to use it but I dound it pretty difficult for systems that need a GUI. Maybe I should revisit.

Re: Local privilege escalation via execve()

#46

Post by cyberpunk »

wolvoleo wrote: post #43
cyberpunk wrote: post #36

Earlier quoted context omitted.

Hah I'm your mirror version -- my linux machines are all VMs running on FreeBSD hosts!

Oh you use bhyve? I've tried to use it but I dound it pretty difficult for systems that need a GUI. Maybe I should revisit.

Yep, most of my linuxes are headless -- but I do have a VM which I pass a graphics card through to for games and ai stuff though -- works really well (as long as you don't reboot the VM, it has a hard time attaching to the gfx card the second time for some reason, not looked into it much)

sysutils/vm-bhyve makes it quite friendly.

I wouldn't use it for work, though, just personal. Work is all enterprisey kubernetes stuff.

Edit: there is a 'proxmox-like' for FreeBSD out [0] -- I did try it on a couple machines and couldn't get the network working, but consoles seemed to work.. Kinda.

0: https://sylve.io

Re: Local privilege escalation via execve()

#47

Post by wolvoleo »

cyberpunk wrote: post #46
wolvoleo wrote: post #43

Earlier quoted context omitted.

Oh you use bhyve? I've tried to use it but I dound it pretty difficult for systems that need a GUI. Maybe I should revisit.

Yep, most of my linuxes are headless -- but I do have a VM which I pass a graphics card through to for games and ai stuff though -- works really well (as long as you don't reboot the VM, it has a hard time attaching to the gfx card the second time for some reason, not looked into it much) sysutils/vm-bhyve makes it quite friendly. I wouldn't use it for work, though, just personal. Work is all enterprisey kubernetes s…

Ah I don't really have a second GPU to dedicate to it though. A virtual console like in VMware or QEMU/KVM would be great. Thanks for the heads-up about sylve! I'll check it out.

For me it's all personal too. For work we still use VMWare a lot.

Re: Local privilege escalation via execve()

#49

Post by cperciva »

broken-kebab wrote: post #18
loeg wrote: post #15

Earlier quoted context omitted.

[flagged]

Or in other words, the response is well-coordinated so cperciva's bragging is justified, isn't it?

Indeed, I was thinking about this precise issue when I made the point that corresponding issues get handled much better in FreeBSD than in Linux.
Post reply on HN