2 ms·
Not sure I follow, can a non-root user observe raw packets (like SYN packets and sequence numbers) through these facilities? Edit: well, a statically linked pc
by 0x0 12y ago
Not sure I follow, can a non-root user observe raw packets (like SYN packets and sequence numbers) through these facilities?
Edit: well, a statically linked pcap is still just a bunch of user-mode assembly code. I didn't think linux kernel security hinged on keeping libraries secret :P
- tedunangst 12y agoI tried interpreting the ars article (rookie mistake) and assumed it was stealing traffic from other programs running as the same user.
- 0x0 12y agoAha, now I see why you brought up ptrace. But they were talking about magic syn packets etc (in the securelist post linked from another comment, I got the sources mixed up)