Messages in this thread | | | Date | Thu, 02 Sep 2004 06:49:53 -0700 | From | John Myers <> | Subject | Re: (was: Re: PATCH: cdrecord: avoiding scsi device numbering for ide devices) |
| |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Joerg Schilling wrote: | John Myers <electronerd@monolith3d.com> wrote: | | |>I hope this is not a stupid idea: |> |>I propose a finer-grained approach to suid-root binaries. Perhaps, |>instead of having a single flag giving the binary all the rights and |>responsibilities of its owner, there could be a table/list/something of |>capabilities which we want to grant to the binary. This, of course, |>would be a privileged operation (perhaps a new capability?). |> |>For example, we might want to grant cdrecord CAP_SYS_RAWIO. This way, we |>don't have to worry about cdrecord running as root and not dropping all |>the capabilities it doesn't need, by accident or by malice. | | | cdrecord neither does drop the privileges by accident nor by malice.
I wasn't trying to insult cdrecord, or even suggest it might have the inkling of a possibility of this type of issue, and I am sorry if I made it sound that way. I was merely trying to illustrate a use of my proposal. I admit, I should have invented a name, like cd-burning-fire-toaster-program to illustrate the separation of my example from any actual existing implementation
| What I however see is that a completely unneeded incompatible interface change | has been applied to a _stable_ Kernel.
I really wasn't talking about that. I was, however, trying to offer a solution that would, perhaps, allow both this change, and cdrecord, to co-exist peacefully, without running cdrecord as root.
| | On a cleanly designed OS with fine grained permissions, a program like cdrecord | does not need to worry about the permissions as it gets exactly the needed | permissions granted by the execution environment. | | Jörg |
Which is exactly what I proposed...
So... could anyone comment on my proposal, rather than just flame my examples?
- -- electronerd (jonathan s myers) code poet and recycle bin monitor programmer, monolith3d.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBNyUBNh5QaxZowccRAtGYAJ4gLta/cmcRpDQoDf3u1bdEdx8vKwCgikzM xVI2EyH2pwRbUI/KgLGP7YQ= =Sxlq -----END PGP SIGNATURE-----
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |