process checkpoint restore facility now in DragonFly BSD

Avleen Vig lists-freebsd at silverwraith.com
Tue Oct 21 13:08:33 PDT 2003


On Tue, Oct 21, 2003 at 09:30:38AM -0700, Kris Kennaway wrote:
> > Please note that there are *SEVERE* security issues with this module.
> > The module is not loaded into the kernel by default and, when loaded,
> > can only be used by users in the wheel group.
> 
> Why the wheel group?  Until now, the only special privilege this group
> has is that users are allowed to su to root, if they knew the
> password.  It looks like now you've removed the root password barrier
> and allow anyone in the wheel group to manipulate processes to obtain
> root without a password :-)

If you don't want them getting root, don't put them in wheel? ;-)
<ducks>

-- 
Avleen Vig
Systems Administrator
Personal: www.silverwraith.com
EFnet:    irc.mindspring.com (Earthlink user access only)


More information about the freebsd-hackers mailing list