Subject: Re: TCPCTL_IDENT (Was: CVS commit: src/etc)
To: Simon Burge <simonb@wasabisystems.com>
From: Matthias Scheler <tron@zhadum.de>
List: tech-kern
Date: 05/02/2003 15:33:15
On Fri, May 02, 2003 at 11:24:58PM +1000, Simon Burge wrote:
> Indeed no - I've checked that "nobody" and "nobody:nobody" works.

That's what I expected.

> (Does the former imply that later as "nobody" is the group of the "nobody"
> user).

It should.

> I don't have any idea of security implications of this.

I don't know a way to abuse that (yet). But maybe it could be utilizied
to exploit another security whole by finding out the port which is
used by another application easily.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/