[lkml]   [1996]   [Dec]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: NT vulnerable to attack on CPU

On Thu, 26 Dec 1996, Albert Cahalan wrote:

> Some sort of security daemon could load user limits into the kernel
> as each UID is first used. The kernel could dispose of the per-UID
> information as soon as the count of processes with a particular UID
> reaches zero. Those system admins that don't need detailed user
> control could just skip the daemon, which would make the kernel use
> defaults. (something hacked info/from kerneld?)
> There may be more uses than just user limits.

Why don't you just implement a security model like MVS, whereby the
kernel asks some central security daemon whether it should complete a
function call or not. This has already been mentioned on the list. I am
sure that ex-mainframers taking a look at Linux would fall in love with
something like this. ;) People who don't want this model get the usual
Unix semantics.

William Burrow -- Fredericton Area Network, New Brunswick, Canada
Copyright 1996 William Burrow
Canada's federal regulator says it may regulate content on the Internet to
provide for more Canadian content. (Ottawa Citizen 15 Nov 96 D15)

 \ /
  Last update: 2005-03-22 13:37    [W:0.036 / U:1.080 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site