Messages in this thread | | | From | (David Wagner) | Subject | Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges | Date | Thu, 31 Dec 2009 17:55:27 +0000 (UTC) |
| |
Alan Cox wrote: >Removing specific features from a specific piece of code >generally isn't a security feature -
You lost me there. The ability of a specific piece of code to voluntarily relinquish privileges can be a big benefit to security. It enables privilege-separated software architectures, which are a powerful way to reduce risk. That's the motivation for the disablenetwork proposal that has stimulated all this discussion. I hope this is obvious? Does it need elaboration?
| |