From owner-freebsd-chat@FreeBSD.ORG  Thu Dec 12 16:33:27 2013
Return-Path: <owner-freebsd-chat@FreeBSD.ORG>
Delivered-To: freebsd-chat@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id F14C1190
 for <freebsd-chat@freebsd.org>; Thu, 12 Dec 2013 16:33:27 +0000 (UTC)
Received: from smtp.des.no (smtp.des.no [194.63.250.102])
 by mx1.freebsd.org (Postfix) with ESMTP id B431511C0
 for <freebsd-chat@freebsd.org>; Thu, 12 Dec 2013 16:33:27 +0000 (UTC)
Received: from nine.des.no (smtp.des.no [194.63.250.102])
 by smtp-int.des.no (Postfix) with ESMTP id 8DAB573C7;
 Thu, 12 Dec 2013 16:33:26 +0000 (UTC)
Received: by nine.des.no (Postfix, from userid 1001)
 id D01801A48; Thu, 12 Dec 2013 17:33:28 +0100 (CET)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To: "Jason C. Wells" <jcw@speakeasy.net>
Subject: Re: Rooted
References: <52A6B07C.5050606@speakeasy.net>
Date: Thu, 12 Dec 2013 17:33:28 +0100
In-Reply-To: <52A6B07C.5050606@speakeasy.net> (Jason C. Wells's message of
 "Mon, 09 Dec 2013 22:11:08 -0800")
Message-ID: <86haaedo6f.fsf@nine.des.no>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: fbsd_chat <freebsd-chat@freebsd.org>
X-BeenThere: freebsd-chat@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Non technical items related to the community
 <freebsd-chat.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-chat>,
 <mailto:freebsd-chat-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-chat/>
List-Post: <mailto:freebsd-chat@freebsd.org>
List-Help: <mailto:freebsd-chat-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-chat>,
 <mailto:freebsd-chat-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Dec 2013 16:33:28 -0000

"Jason C. Wells" <jcw@speakeasy.net> writes:
> Regarding the security advisory lingo, does "unprivileged user" mean a
> remote attacker? Most (all?) of the advisories seem to involve local
> exploits or exploitable services.

The term "unprivileged user" implies access to the system - it is a
catch-all term for user who can run programs on the system but do not
have the necessary credentials to access any files or devices or control
any processes not owned by themselves.  A remote attacker would be
explicitly labelled as such.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no