Bug#585951: virtualbox-ose: should not be set suid

2010-06-15 Thread Frank Mehnert
You are correct that these binaries are suid root but your deduction is wrong. These binaries need access to a kernel interface which is provided by the VirtualBox kernel modules. This interface can be used to harm complete machine including the kernel. So the access to this interface must be

Bug#585951: [Pkg-virtualbox-devel] Bug#585951: virtualbox-ose: should not be set suid

2010-06-15 Thread Michael Gilbert
On Tue, Jun 15, 2010 at 09:04:34AM +0200, Frank Mehnert wrote: You are correct that these binaries are suid root but your deduction is wrong. These binaries need access to a kernel interface which is provided by the VirtualBox kernel modules. This interface can be used to harm complete machine

Bug#585951: virtualbox-ose: should not be set suid

2010-06-14 Thread Michael Gilbert
package: virtualbox-ose severity: important tags: security the following virtualbox binaries have the suid bit set. this is a poor practice from a security perspective. /usr/lib/virtualbox/VBoxNetAdpCtl /usr/lib/virtualbox/VBoxNetDHCP /usr/lib/virtualbox/VirtualBox /usr/lib/virtualbox/VBoxSDL