[lkml]   [1996]   [Dec]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Priviledge Groups

>Perhaps implementing something like HP-UX priviledge groups
>would help solve the link(2) problems that people have been

>For those who don't have HP-UX 10 systems handy priviledge
>groups associate groups (although I'd do it to the granularity
>of users) access to certain system capabilities.

A scheme like this, if done right, could eliminate the vast majority of
security holes that show up in unix... While we're at it, it would be a
good idea to have restrictions also, such as not allowed to fork, not
allowed to exec, not allowed to open files for writing (possibly even
with a list of files excepted from the restriction). This could be used
to prevent priviledged programs from expanding their access. The program
should also be allowed to add restrictions to itself or drop privledges.

 \ /
  Last update: 2005-03-22 13:37    [W:0.031 / U:0.272 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site