[lkml]   [2008]   [Feb]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] per-process securebits
    At Sunday 03 February 2008 around 08:18:12 Andrew Morton wrote:
    > So how do we ever get to the stage where we can recommend that distributors
    > turn these things on, and have them agree with us?

    FWIW with my distributor hat on I think File system capabilities are very nice
    and enables one to ship a distribution with a small set of setuid binaries.

    On the other hand for per-process securebits, it would be nice to see a
    complete example how it could be applied to a setuid program. That would be a
    nice step in moving forward.


    Never learn by your mistakes, if you do you may never dare to try again.

     \ /
      Last update: 2008-02-03 07:27    [W:0.040 / U:3.352 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site