4
(Choose 1 answer)
Which of the following is a reasonable conclusion that one might draw by studying Unix kernel attacks such as the old IFS exploit?
A. Seeing open source code might help one design an attack.
B. Set-uid-to-root should be used more extensively in OS design
C. Setting variables by users of an OS should be encouraged
D. The object code for an OS runtime system cannot be understood
E. Open source code cannot help in the design of an attack
