看板FB_security
标 题Vulnerability - moused dependency on dbus-daemon - how to get rid
发信站NCTU CS FreeBSD Server (Wed Sep 26 05:40:20 2012)
转信站ptt!csnews.cs.nctu!news.cs.nctu!FreeBSD.cs.nctu!freebsd.org!owner-free
one way of attacking the OS
1.search the lists
http://lists.freebsd.org/pipermail/freebsd-questions/2012-May/241042.html
2.)mouse intermittent works if problem with dbus-daemon
3.)analyze - dbus-daemon is a 'relatively unknown' and extra DEPENDENCY
of moused
4.)set kern.securelevel=333
5.)interrupt control of moused
root /usr/sbin/moused -F 200 -A 1.5.2.0 -a 0.7 -r high -V -p /dev/psm0 -t
auto
6.)alt to port /dev/psm0 - not completed
so, how can anything dbus be ELIMINATED from the OS?
*details using dtpstree
init-+-adjkerntz
|-console-kit-daemon
|-devd
|-moused
|-dbus-daemon
|-polkitd
|-swapexd
|-7*[getty]
|-gpg-agent
|-2*[gam_server]
|-login---shell--sh---xinit-+-Xorg
| `-fluxbox-+-terminal
|-***network
question: how can dbus or dbus-daemon be eliminated from the basic OS
configuration for a
developer workstation?
Thank you.
--
View this message in context:
http://freebsd.1045724.n5.nabble.com/Vulnerability-moused-dependency-on-dbus-daemon-how-to-get-rid-of-DBUS-tp5746974.html
Sent from the freebsd-security mailing list archive at Nabble.com.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"