[lkml]   [2009]   [Oct]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [RFC] Privilege dropping security module
    > Yeah, and now your ~/.ssh/identity is being uploaded to remote server.

    The given policy sets the home directory (including ~/.ssh/) to `X'
    which does not include read access, so ~/.ssh/identity should be safe.
    There are some other problems with this particular policy though, /tmp/
    is still readable for example.

    > I believe people are already sandboxing apps with selinux...

    Yes, some people (including myself) are already using selinux, tomoyo,
    smack, etc, for sandboxing. However, I think those have some
    disadvantages that I'm trying to address.

    > ...and subterfugue certainly does what you want, using ptrace... no
    > kernel mods needed and should already be secure.

    subterfugue does look interesting, but it seems like it would be pretty
    slow and hasn't been unmaintained since 2001.
    [unhandled content-type:application/pgp-signature]
     \ /
      Last update: 2009-10-01 11:19    [W:0.021 / U:0.328 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site