Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 May 2019 01:42:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 233578] Unprivileged local user can prevent other users logging in by locking utx.active
Message-ID:  <bug-233578-227-SHrn3wqjJM@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-233578-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-233578-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D233578

--- Comment #9 from Ed Schouten <ed@FreeBSD.org> ---
No, that's not the case. The code does more than simply write a record into=
 the
file at a certain offset. It also reads entries to determine what the offse=
t is
at which the record should be placed.

It's insufficient to replace this code by something that doesn't use file
locking. There may be race conditions in which you end up overwriting recen=
tly
created login session entries.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-233578-227-SHrn3wqjJM>