lkml.org 
[lkml]   [2010]   [Jan]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4)
On Sun, 10 Jan 2010, Pavel Machek wrote:

> > > For the record: NAK, as it introduces security holes.
> >
> > Please elaborate.
>
> See the mailthread.

Yep, wading through several weeks of it..

>
> Allows user to disable suid program's access to network. That bypasses
> audit, and will cause system-wide DoS if suid program decides to go
> daemon.

Ok.

--
James Morris
<jmorris@namei.org>


\
 
 \ /
  Last update: 2010-01-10 22:49    [from the cache]
©2003-2014 Jasper Spaans. Advertise on this site