Messages in this thread | | | From | insecure <> | Subject | Re: Re: Re: [PATCH]: non-readable binaries - binfmt_misc 2.6.0-test4 | Date | Fri, 5 Sep 2003 00:28:55 +0300 |
| |
On Thursday 04 September 2003 09:53, Zach, Yoav wrote: > > --- insecure <insecure@mail.od.ua> wrote: > > > If the binary resides on a NFS drive ( which > > > is a very common practice ) > > > then the suid-wrapper solution will not work > > > because root permissions > > > are squashed on the remote drive. > > > > This is a NFS promlem. Do not work around it by > > adding crap elsewhere. > > NFS has to get a decent user auth/crypto features. > > I did not try it yet, but NFSv4 will address that. > > This is not a workaround - it's a solution for systems > that use the unix user identification mechanism.
In NFSv3 there is _no_ user identification mechanism. ipaddr based /etc/exports does not count. -- vda - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |