4 ms·
> Exploit chains these days are very used to having to jump through IPC channels to components with different privileges to get everything they need. Thank you
by justinpombrio 5y ago
> Exploit chains these days are very used to having to jump through IPC channels to components with different privileges to get everything they need.
Thank you for bringing this up; it's an important point. Do you have a sense of what a practical solution might be?
One thing I can imagine is that there's a JNDI component, but to communicate with it over IPC, you need the JNDIComponent capability. This would allow a couple ways to prevent the log4j vulnerability:
1. You don't give the JNDIComponent to log4j.
2. You use capabilities inside JNDI to separate out the bits that use the network from those that don't, and only supply log4j with a JNDIComponentWithoutNetworkAccess.
This requires co-operation between capabilities in the OS and in the programming language, though, which is a big ask. Plus some foresight; much more than as described in my post.