New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
"During normal operation" is the key point. During normal operation, no one is going to be attempting an LPE either. But if anything is compromised, say an NTP daemon or a recursive DNS resolver, it could trigger module loading and then exploit the system. In essence, even if the modules are not loaded, every single process on the system is running as root.
That’s fair, and I understand your point.
If an attacker already compromised something like an NTP daemon or recursive DNS resolver enough to execute code and interact with kernel functionality, then you already have a serious security problem other than Dirty Frag itself.
That's true, and that's why defense in depth is such a good idea. Otherwise, we'd all just run everything as root and mode 777 everything.