Messages in this thread | | | Date | Wed, 29 Dec 1999 17:29:11 +0100 (CET) | From | (Arjan van de Ven) | Subject | Re: Unexecutable Stack / Buffer Overflow Exploits... |
| |
In article <Pine.SUN.3.96.991229052840.376X-100000@invisible.eskimo.com> you wrote: >> > suffice to raise major havoc. Besides if they can get a shell as ANY UID >> > that gives them an inside base from which to advance their attack.
I would like to see an option that does the folowing:
1) Let "normal user" programs bind to ports < 1024 ONLY IF 2) that program was given this "capability" by root, for example by means of an file-system flag.
This allows a lot of, currently, SUID-programs to run as non-root all the way, and thus, when used properly, enhances security of networked systems.
Greetings, Arjan van de Ven
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |