4 ms·
> that could allow somebody to violate a reasonable security policy for that system That's "security bug". Please stop saying it's not.
by cryptonector 2y ago
> that could allow somebody to violate a reasonable security policy for that system
That's "security bug". Please stop saying it's not.
- kuschku 2y agoAs detailed in my sibling reply, by definition that includes any bug in gettime (as that'd affect tls certificate validation), any bug in a filesystem (as that'd affect loading of selinux/apparmor profiles), any bug in eBPF (as that'd affect network filtering), etc. Additionally, any security bug in the kernel itself, so any use after free, any refcounting bug, any use of uninitialized memory. Can you now see why pretty much every kernel bug fulfills that definition?