Re: propolice

[Peter Fairbrother <zenadsl6186@zen.co.uk>]

Miod Vallat wrote:

>> Propolice relies on a random guard variable that is unknown to an attacker,
>> and which cannot be determined without local root privileges.
>> 
>> However, an attacker could load a compiled package on a machine on which he
>> does have root and determine the value.
>> 
>> So any protection would not apply to pre-compiled packages.
>> 
>> I may be wrong here, if so would someone please let me know how.
> 
> The guard value is computed at runtime, and will be different between
> processes.
> 
> So having the ability to know it in your binary does not help much
> breaking others.
> 

Thanks. 


-- 
Peter Fairbrother