Messages in this thread | | | Date | Sat, 10 Apr 1999 11:14:36 -0500 (CDT) | From | Daniel Taylor <> | Subject | Re: [PATCH] Capabilities, this time in elf section |
| |
Least astonishment in this case would mean that the binary has the capabilities available to its EUID. In the case of a SUID binary the EUID is the UID of the owner of the binary.
This is the reason for SUID binaries.
Non-SUID binaries get their EUID from the UID of the user running the binary. So they can only have capabilities that are available to that user.
If a binary requires a capability to run to do its job then it either needs to be run by a user that has that capability or it needs to be SUID to a user that does.
SUID binaries should _still_ be rare, but since they will not all be SUID-root the potential security risk will be reduced.
Daniel Taylor
On Fri, 9 Apr 1999, Jonathan Walther wrote:
> > On Fri, 9 Apr 1999, Daniel Taylor wrote: > > Exactly. > > Non-SUID binary, & capabilities with user, > > SUID binary, own capabilities. > > I disagree. if you suid to some other user, then they become the effective > user, so the effective capabilities should become and & of THAT users > capabilities and the binaries capabilities, and not those of the invoker. > > Doesn't anyone believe in the principle of least astonishment? :-( > > Jonathan Walther > Digital Video Broadcasting Systems > http://216.100.231.12 (requires netscape) >
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |