Live data from Hacker News

Linux local privilege escalation 0day, 2.6.37 - 3.8.10

fucksheep.org

81–90 of 100 posts

Re: Linux local privilege escalation 0day, 2.6.37 - 3.8.10

#81
Why the hell is CONFIG_PERF enabled in distribution kernels?? A normal server/desktop user would NEVER USE THAT. If you're smart enough to use Perf, you ought to be smart enough to compile your own kernel.

This is a brilliant example of how stupid many distros are with their kernel configurations. They need to start understanding that enabling features that nobody uses only increases the probability of problematic bugs.

Also, they need to stop enabling CONFIG_CC_STACKPROTECTOR. It slows stuff down, and as can be seen here, often doesn't do any good.

Re: Linux local privilege escalation 0day, 2.6.37 - 3.8.10

#85
He assumes the system will have an executable named "bash".

As this 0day is written, rename bash to sh and it will fail. Better yet, remove bash from your system and replace it with a simpler POSIX compliant sh.

No respectable systemwide shell script should rely on bash anyway.

Post reply on HN