lkml.org 
[lkml]   [1999]   [Apr]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: caps in elf, next itteration (the hack get's bigger)
   Date: Fri, 16 Apr 1999 11:44:35 -0400 (EDT)
From: "David L. Parsley (lkml account)" <kparse@salem.k12.va.us>

Ok, I agree completely with this; I don't see any good use for fE, it
really doesn't enhance security; if someone can explain to me why it
might, I'd be interested (Ted?)

fE is the rough equivalent of the setuid bit, except it's broken out by
capabilities. You still need it, because a non-privileged user may need
to execute a binary which has some privileges, but which does its own
access controls and authorization checks before doing some privileged
operation on behalf of the user. So fE is still absolutely needed.
Most of the programs which are setuid root today would have some kind of
non-zero fE mask.

- Ted

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.166 / U:0.056 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site