3 ms·
What's amusing is that this is a classic 30+yrs old "sym link" exploit. Interesting how classic most of the exploits coming up are, almost like the current ge
by segmondy 6y ago
What's amusing is that this is a classic 30+yrs old "sym link" exploit. Interesting how classic most of the exploits coming up are, almost like the current generation don't know the lessons of the past ...
- gizmo686 6y agoIts not quite a classic synlink exploit. Normally, the purpose of a symlink exploit is to get a privledged process to leak information about a file you don't have access to. Here, as the article mentions, part of the attack relies on the fact that the privledged process goes out of its way to defend against such an attack. As far as I can tell, the symlink is not even nessasary. You should be able to get the same effect by making 1TB big. Using sparse files, you don't even need much disk space.