[lkml]   [1996]   [Dec]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Linux Security: An Appeal

> True but it's not clear that that is a bad thing. If I hack my kernel
> so that user httpd can bind port 80 or that a mail reception agent can
> bind port 25 (so that they do not have to run as root) is it still
> Unix? If I then put this type of deviation from the standard unix set-
> up in a configuration file...

Anyone wanting to contribute an ipfw modification to allow you to set
permissions on firewall entries is asked to contribute. Its an idea
I've bounced around for ages but not found nice semantics for.

I'd also strongly suggest at looking at the POSIX.6 work which is designed
to cleanly handle issues like fine grained security. Remember however that
fine grained security can also simply mean lots of smaller leaks

 \ /
  Last update: 2005-03-22 13:38    [W:0.059 / U:0.972 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site