Messages in this thread | | | Date | Thu, 14 Jan 2010 10:22:51 +0100 | From | Pavel Machek <> | Subject | Re: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4) |
| |
> On Tue, 12 Jan 2010 08:59:27 +0100, Pavel Machek said: > > > Well, maybe, but mailer system where first user starts is as a daemon > > makes sense... > > Does it? How do you get port 25 open for listening if the first user isn't > root? Most *actual* schemes to "launch at first use" that require privs for > something have used inetd or similar - that program exists for a > *reason*.
Remember sendmail is setuid root... so it already has the permissions.
Except that proposed disablenetwork would take network connectivity even from setuid apps. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
| |