Bug#490545: gnupg-agent: should not permit ptrace

2008-08-10 Thread Russell Coker
On Monday 11 August 2008 14:08, Eric Dorland <[EMAIL PROTECTED]> wrote: > > It is possible to ptrace (strace or gdb) the gpg-agent program. > > This means that if an attacker compromises any process running on > > behalf of a user (an MUA or a web browser) then they can ptrace > > gpg-agent and wai

Bug#490545: gnupg-agent: should not permit ptrace

2008-08-10 Thread Eric Dorland
tags 490545 security thanks * Russell Coker ([EMAIL PROTECTED]) wrote: > Package: gnupg-agent > Version: 2.0.0-5.2 > Severity: normal > > It is possible to ptrace (strace or gdb) the gpg-agent program. > This means that if an attacker compromises any process running on > behalf of a user (an MUA

Bug#490545: gnupg-agent: should not permit ptrace

2008-07-12 Thread Russell Coker
Package: gnupg-agent Version: 2.0.0-5.2 Severity: normal It is possible to ptrace (strace or gdb) the gpg-agent program. This means that if an attacker compromises any process running on behalf of a user (an MUA or a web browser) then they can ptrace gpg-agent and wait for the GPG pass- phrase t