sektioneins/SUIDGuard
View on GitHub ↗ ★ 391 C++
SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
3 mentions on Hacker News by 2 people: 0 stories, 3 comments · first 2015-08-07 · latest 2015-08-07
20082026
-
The kext at https://github.com/sektioneins/SUIDGuard does something like that. For privileged processes, it neuters DYLD_* variables completely.
comment by delinka · 2015-08-07 · in OS X sudoers exploit found in the wild -
For anyone looking for the patch: https://github.com/sektioneins/SUIDGuard
comment by odonnellryan · 2015-08-07 · in OS X sudoers exploit found in the wild -
There's a patch here: https://github.com/sektioneins/SUIDGuard
comment by odonnellryan · 2015-08-07 · in OS X sudoers exploit found in the wild