Tag Info

Your method #1 can be adapted to protect against symlink attacks: lstat() the file path you want to chmod. Save the values of st_dev and st_ino in the struct stat that is returned. These two numbers uniquely identify the file on your system. open() the file with O_RDONLY. fstat() the open file descriptor. Check to make sure that st_dev and st_ino are ...

You may need to use a File Integrity Monitoring tool to look at the directories the software may affect. The FIM will monitor for creation, modification and deletion of folders/files in those locations and provide a report. However, it may tell you that changes have been made but not what are the specific changes. You could run 2 separate systems; one ...

This clearly is being written to promote a reasonably tested application. I have three comments about this: First and foremost, they should have their own internal scanning program (vulnerability assessment) that they would provide a test bed to run your program on as part of their acceptance testing. A software vendor may choose to have and develop their ...

Web application scanners are hardly be the be all end all of web application security and simply running an off the shelf tool will not solve the the problem of an insecure application. That being said, the security impact of a desktop application is highly dependent on what your application does. Is it a server? Does it communicate over a network? Does ...

Be aware: setting an executable as non-executable doesn't prevent it from running if it is readable (not to mention the concept of copying the file). $ cp /bin/ls ~/bin/ls $ chmod a-x ~/bin/ls $ /lib/x86_64-linux-gnu/ld-2.15.so ~/bin/ls #Yup, that worked. ... though you can prevent that if the file isn't readable, which doesn't stop execution. $ chmod ...

Note that in this case, what is deemed insecure is the RarVM implementation found in WinRAR, and probably not in the core design of the VM (if so, more interesting). So you can either assume WinRar itself is insecure (something not improbable) or that all RAR files are insecure (more improbable than before). What you do with this information, is probably ...