[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Fwd: VSFTPD Remote Heap Overrun (low severity)
- To: Daniel J Walsh <dwalsh@xxxxxxxxxx>
- Subject: Re: [Full-disclosure] Fwd: VSFTPD Remote Heap Overrun (low severity)
- From: Ramon de C Valle <rcvalle@xxxxxxxxxx>
- Date: Mon, 12 Dec 2011 13:31:21 -0500 (EST)
> But how can I state that ftp has access to the users homedir and not
> allow access to user_home_t?
This is a good question. Actually, we shouldn't allow ftpd_t read the locale
files from within user_home_t directories. But now I'm not sure if this will be
possible.
--
Ramon de C Valle / Red Hat Security Response Team
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/