Messages in this thread | | | From | (Eric W. Biederman) | Date | Tue, 29 Dec 2009 12:56:44 -0800 | Subject | Re: RFC: disablenetwork facility. (v4) |
| |
Bryan Donlan <bdonlan@gmail.com> writes:
> It's probably reasonable to require that real == effective == saved == > fs UID (and same for GID); anything else brings up sticky issues of > "which UID is a higher capability?" > If a process does this call, it's effectively saying that the only way > it's going to be accessing resources beyond its current UID and > capabilities is by talking to another process over a (unix domain) > socket.
Makes sense. Especially for the initial implementation, and it keeps the code size small.
Eric
| |