Messages in this thread | | | Date | Mon, 31 May 1999 13:38:27 -0300 (EST) | From | Augusto Cesar <> | Subject | Re: [PATCH]: alternative security - special gids |
| |
On Mon, 31 May 1999, Marc SCHAEFER wrote:
> > > On Sun, 30 May 1999, Augusto Cesar wrote: > > > This a good idea, I can set the initial value as 0 (root gid) and if the > > user needs the special gids they can set via /proc. > > No, please don't. Make it so that it doesn't depend on a particular > group. Even if using a 0-group could have other security implication, > I am convinced that we should not add some more semantic until > specifically asked. > > So, my request: initially, only root (or capability) can bind() to > ports below 1024. IF root echo group > /proc/some_file, group becomes > authorized. >
Ok, I understand your request now, Im working in a new version of the patch, soon I put in http://bishop.sekure.org for download.
-- Augusto Cesar Sekure SDI http://www.sekure.org
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |