New Linux udisks flaw lets attackers get root on major Linux distros
bleepingcomputer.com
New Linux udisks flaw lets attackers get root on major Linux distros
1–10 of 287 posts
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#2As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#3As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
If you think Linux is an experiment, you should see the other OSes.
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#4As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
> I have to say it remains an eternal experiment
You just defined 'life' in general.
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#5As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
That's certainly an interesting standpoint.
I use both privately and professionally and while I accept that security-wise (even with selinux) they feel lacking, feature-wise they far exceed Windows I use as my other is except in gaming experience.
I wish I had something like GrapheneOS on desktops (yes I know about Qubes)
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#6As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
Local root privilege escalation is mostly irrelevant these days. It’s only useful as part of an exploit chain, really. It’s not like shell servers are still around.
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#7Re: New Linux udisks flaw lets attackers get root on major Linux distros
#8As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
That's certainly an interesting standpoint. I use both privately and professionally and while I accept that security-wise (even with selinux) they feel lacking , feature-wise they far exceed Windows I use as my other is except in gaming experience. I wish I had something like GrapheneOS on desktops (yes I know about Qubes)
same! qubes is probably the actual solution for now, but i've seen some grapheneos people work on https://secureblue.dev/ and that seems a lot more "normal"
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#9As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
Local root privilege escalation is mostly irrelevant these days. It’s only useful as part of an exploit chain, really. It’s not like shell servers are still around.
An exploit chain, like combining it with the PAM issue they mentioned in the very same article, affecting Fedora.
Re: New Linux udisks flaw lets attackers get root on major Linux distros
#10As someone who has been using linux quite happily on the desktop for more than 20 years now, I have to say it remains an eternal experiment, feature wise as well as security wise.
That's certainly an interesting standpoint. I use both privately and professionally and while I accept that security-wise (even with selinux) they feel lacking , feature-wise they far exceed Windows I use as my other is except in gaming experience. I wish I had something like GrapheneOS on desktops (yes I know about Qubes)
> I wish I had something like GrapheneOS on desktops (yes I know about Qubes)
SecureBlue and Kicksecure are the closest equivalents.