lkml.org 
[lkml]   [1999]   [Apr]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Subject: Re: ext3 to include capabilities?
Santos Halpar writes:
> Albert D. Cahalan" <acahalan@cs.uml.edu> wrote:
> > G. Sumner Hayes writes:
> > > Albert Cahalan <acahalan@cs.uml.edu> wrote:
> >
> > >> 1. Put capabilities information in the executable header.
> > >> 2. Mark the executable setuid root.
> > >> 3. Have the kernel check for #1 if #2, and prefer #1 if present.
> > >
> > > Of course, you've completely busted up security.
> >
> > Nope, think about the system a bit more. It isn't so stupid.
> >
> > if(setuid){
> > if(root_owned && cap_header) use_cap_header();
> > else use_setuid_bit();
> > }
> >
>
> I understand that. Read my concern again. I don't understand how
> your system can possibly make my (already installed) 2.0.x kernel
> ignore the setuid bit. I have 2.0.x around for stability, so putting
> random patches into it isn't really an option. It seems like your
> system will run programs with capabilities on 2.2.x but full-blown
> setuid on 2.2.x, which opens up the security holes I'm concerned
^^^^^

2.0.x I assume.

> about when running the most stable (for the moment :) and secure
> kernel. :(

Either: patch 2.0.x to ignore suid-root or mount filesystems with the
nosuid option if you really don't want to trust suid-root binaries.

That of course can leave you with a crippled system (unless you only
log in as root), but then again so does putting capabilities in
ext2fs, since all your binaries which require capabilites will now no
longer run.
I suppose a compromise would be to have / mounted with suid allowed
but all other filesystems nosuid.

Regards,

Richard....

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.130 / U:0.028 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site