[lkml]   [1996]   [Dec]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Proposal: restrict link(2)

> Difficult, perhaps, but not impossible. Just program with a devious
> mindset. In case of this particular problem, make sure that you don't
> chown() the file, but rather open() it, fstat() it, stat() it, then fchown()
> it. It can't get much safer than that.

Linux 2.1.15 has the ability to pass secure access right information
(userid etc) between processes over unix sockets. IMHO You can now build
a client/server based unix setup for all the priviledged operations without
a setuid binary on the system.

 \ /
  Last update: 2005-03-22 13:38    [W:0.073 / U:1.964 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site