![]() | |||||||||||||
Messages in this thread |
> > You could argue about the usefulness of ptrace. The point is, that > > suid/sgid programs _can_ be discerned, and ptrace _needs_ to discern > > them. > > I actually neither needs to, nor does. For ptrace the definition is: > If the tracee has different privilegies, than the tracer, than it > can't be traced. Right. I was talking about suid/sgid because with private namespaces (unless there's a way to enter them externally) only suid/sgid programs will have different privileges. > For this definition, the check is not a hack. It's the only way to go. > > Now this definition is really what is needed for the filesystem case > too, so I think it's not a hack either. Fully agreed. Miklos - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-05-13 10:39 [from the cache] ©2003-2008 | |||||||||||||