lkml.org 
[lkml]   [1998]   [Nov]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: New Solaris 7 features
Date

> On 12-Nov-98 Albert D. Cahalan wrote:
> > Note that executables owned by root could be exempt from checking.
> > As long as root owns the JIT compiler, it can run at full speed.
>


If you want to prevent local users from bringing down the machine, you'd
have to avaid any method by which they could insert code into root
programs. In addition to fairly direct problems such as having
to run root owned programs with an LD_LIBRARY_PATH in the JIT and having
to dynamically switch to the JIT when a non-root library is opened using
'dlopen()', you'd also have to take care of less obvious methods. you'd
have to make sure that you don't have any problems such as buffer overruns
in root owned programs or you could simply install the code yourself.
Having to treat every root owned executable almost as if it were SUID root
doesn't sound too fun.

eric

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:45    [W:0.027 / U:0.240 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site