lkml.org 
[lkml]   [2010]   [Jan]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC][PATCH v3] Unprivileged: Disable raising of privileges
On Thu, 31 Dec 2009 17:55:27 +0000 (UTC)
daw@cs.berkeley.edu (David Wagner) wrote:

> Alan Cox wrote:
> >Removing specific features from a specific piece of code
> >generally isn't a security feature -
>
> You lost me there. The ability of a specific piece of code to voluntarily
> relinquish privileges can be a big benefit to security.

Can be - but its historically been an endless source of bugs and flaws
because the code being run after you take the rights away is being run in
an environment it didn't expect and wasn't tested in.

From inanities like setting the file size limit to 0 and running passwd
blanking the password file (SGI Irix) to closing file handle 0 or setting
cpu quotas to make a forked daemon process die unexpectedly the list is
endless.

Alan


\
 
 \ /
  Last update: 2010-01-01 15:45    [W:0.266 / U:0.144 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site