[Bug 233578] Unprivileged local user can prevent other users logging in by locking utx.active

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun May 19 01:42:43 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233578

--- Comment #9 from Ed Schouten <ed at FreeBSD.org> ---
No, that's not the case. The code does more than simply write a record into the
file at a certain offset. It also reads entries to determine what the offset is
at which the record should be placed.

It's insufficient to replace this code by something that doesn't use file
locking. There may be race conditions in which you end up overwriting recently
created login session entries.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list