[lkml]   [2009]   [Dec]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: RFC: disablenetwork facility. (v4)
    "Serge E. Hallyn" <> writes:

    >> In common cap we drop the new capabilities if we are being ptraced.
    >> Look for brm->unsafe.
    > Yes - that isn't the issue.

    Right. Sorry. I saw that we set unsafe and totally
    missed that we don't act on it in that case.

    > It goes back to finding a way to figure out what is inside the
    > file when the installer obviously thought we shouldn't be able
    > to read the file.
    > Do we care? <shrug>


    I expect two lines of testing bprm->unsafe and failing
    at the right point would solve that.


     \ /
      Last update: 2009-12-30 05:33    [W:0.021 / U:1.484 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site