Ubuntu
linux package

  1. Bug #146508
  2. Comment #1

Comment 1 for bug 146508

Revision history for this message
Kees Cook (kees) wrote : Re: admin password stored as plain text

Thanks for taking the time to report this bug and helping to make Ubuntu better. There are some Distros that ship patches to the /dev/mem handler, but these changes are not supported by the upstream kernel, and Ubuntu has not had the resources to maintain a patch delta. Root users have the capacity to examine per-process memory as well, so fixing /dev/mem would still not change this. The primary reasons to stop /dev/mem access is to avoid things like root-kit installation.

I'm unmarking this as private, as it is already a known public issue with the Linux kernel's /dev/mem interface.

Please feel free to report any other bugs you may find.