Messages in this thread | | | From | elemar@cs ... | Subject | Re: New Solaris 7 features | Date | Fri, 13 Nov 1998 10:42:39 -0500 (EST) |
| |
> On 12-Nov-98 Albert D. Cahalan wrote: > > Note that executables owned by root could be exempt from checking. > > As long as root owns the JIT compiler, it can run at full speed. >
If you want to prevent local users from bringing down the machine, you'd have to avaid any method by which they could insert code into root programs. In addition to fairly direct problems such as having to run root owned programs with an LD_LIBRARY_PATH in the JIT and having to dynamically switch to the JIT when a non-root library is opened using 'dlopen()', you'd also have to take care of less obvious methods. you'd have to make sure that you don't have any problems such as buffer overruns in root owned programs or you could simply install the code yourself. Having to treat every root owned executable almost as if it were SUID root doesn't sound too fun.
eric
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |