lkml.org 
[lkml]   [2009]   [Dec]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [RFC][PATCH v3] Unprivileged: Disable raising of privileges
    From
    Date
    "Andrew G. Morgan" <morgan@kernel.org> writes:

    > Since there is already independent support for disabling file
    > capabilities (the privilege escalation part), I see these two
    > mechanisms as separable.

    I guess there is something that resembles support for disabling
    privilege escalation. The problem is that it requires privilege to
    use it.

    I have no problem with expressing this in a fine grained manner internally
    to the kernel but the user space interface needs to be atomic so that
    we can enable this all without privilege.

    Further I may be off but I think the implementation would be more
    challenging than what I have already posted. That doesn't mean it
    won't be more useful long term.

    Eric


    \
     
     \ /
      Last update: 2009-12-31 19:43    [W:2.781 / U:0.264 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site