Re: [coLinux-users] 0.7.2 release = kernel 2.6.22 + local root exploit

[El T. <ca...@gm...>]

Hi Henry,

Big thanks for your prompt update, you are the best!

I will get the patch when I get home tonight.

Cheers,

cameos

2008/2/19, Henry Nestler <Hen...@ar...>:
> El Topo wrote:
> > I just installed 0.7.2 release, and found that it uses 2.6.22,
> > unfortunately it has the big issue of local root exploit.
> >
> > for more info, see
> > http://it.slashdot.org/article.pl?sid=08/02/10/2011257
>
> Yes. That is true big. But only for untrusted users and opened ssh
> shells. No problems for localy working users, and if You are the only
> one user on your coLinux. ;-)
>
> Thanks for your watching.
>
> > I urge that a new patch release as soon as possible.
>
> Here is a kernel replacement:
> http://www.henrynestler.com/colinux/releases/0.7.2/hotfix/
>
> file: vmlinux-2.6.22-co-0.7.2-20080219.zip
> You can simply replace the installed file "vmlinux" with that binary.
>
> A full coLinux update with installer will follow.
>
> --
> Henry N.
>