lkml.org 
[lkml]   [2010]   [Jan]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4)
    On Sun, 10 Jan 2010, Pavel Machek wrote:

    > > > For the record: NAK, as it introduces security holes.
    > >
    > > Please elaborate.
    >
    > See the mailthread.

    Yep, wading through several weeks of it..

    >
    > Allows user to disable suid program's access to network. That bypasses
    > audit, and will cause system-wide DoS if suid program decides to go
    > daemon.

    Ok.

    --
    James Morris
    <jmorris@namei.org>


    \
     
     \ /
      Last update: 2010-01-10 22:49    [W:0.022 / U:2.100 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site