On: Heap-based buffer overflow in Sudo

[vbezhenar]

Module should be implemented as a separate process running under unprivileged user and communication should be done via pipes. It's UNIX-way. If I understand it correctly, currently module is implemented as a shared library executing under root sharing all the memory with other modules and main program. This exposes way too many opportunities to exploit any vulnerability.

[megous → vbezhenar]

PAM using app can fork a process for this, so it's not too horrible, but it increases complexity.