lkml.org 
[lkml]   [2000]   [Feb]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Capabilities
Hi!

> - Once we have file-based capabilities, we can implement that. Here, the idea I
> posted before (which was shamelessly stolen from another OS) can be used. The
> kernel boots in ``non-trusted'' mode; SUID root binaries get all capabilities. A
> process in the init scripts then switches the system into ``trusted'' mode.
> After that, SUID root binaries are treated no different anymore.

Switching into another mode of operation is just plain ugly. We can
work without that.
Pavel
--
I'm pavel@ucw.cz. "In my country we have almost anarchy and I don't care."
Panos Katsaloulis describing me w.r.t. patents me at discuss@linmodems.org

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:56    [W:0.562 / U:0.412 seconds]
©2003-2014 Jasper Spaans. Advertise on this site