[lkml]   [2009]   [Dec]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: RFC: disablenetwork facility. (v4)
    On Mon, 28 Dec 2009 11:10:06 +0100, Pavel Machek said:

    > a) make disablenetwork reset to "enablenetwork" during setuid exec

    That won't work either. If you only make it 'setuid==0' binaries, you still
    break 'setuid-FOO' binaries that require the net. If you just check the setuid
    bit, it allows a trivial escape by creating a setuid-yourself binary and using
    that to exec something else (now with network access, because we apparently
    don't have a way to remember the previous setting).

    > b) disallow setuid execs for tasks that have network disabled.

    This is probably safer...

    [unhandled content-type:application/pgp-signature]
     \ /
      Last update: 2009-12-28 15:41    [W:0.022 / U:463.004 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site