lkml.org 
[lkml]   [1999]   [Jun]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: RFC: BSD system call revoke?

On Thu, 24 Jun 1999, Matthew Kirkwood wrote:

> > Should a user be able to revoke a file descriptor opened by a root
> > processes in the first place?
>
> Maybe, especially if/when root ceases to mean anything special.

s/root/privileged process in the original comment

> I believe that the call is generally useful and should be made
> available to users, rather than being restricted to CAP_REVOKE
> or CAP_DAC_OVERRIDE.

I agree. I would, however, recommend that an initial revoke()
implementation restrict things to block/char devices. This will speed the
development of revoke() and increase the chances of being ready for 2.4.
In the meantime we can devote some more brainpower to the potential issues
of widening the scope to include files

Chris


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:52    [W:0.304 / U:0.120 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site