[lkml]   [1996]   [Mar]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: ext2 attribute immutable
Date once wrote:
> Sort of. The immutable flag is documented in the e2fsprogs maintained
> by Ted, and has been around for a long time. It's a perfectly
> standard component of Linux. However, to be *really* secure you need
> a way to prevent even root from overcoming the immutable flag. The
> way to do that is to have a global system-wide security level. The
> system boots in singleuser mode with securelev=0, but root may up the
> securelev at any time. A non-zero securelev prevents even root from
> bypassing or removing the immutable (or the append-only) flag on an
> ext2 file.
> Not even root is allowed to decrease the securelev again. The only
> process ever allowed to decrement securelev is init.

So, how does one need to modify /proc/1/mem to decrease the secure-level
after getting root access? :)

Snow ^oo^ Cat <snowcat@math.CSUFresno.EDU>
_ -> <- aka Oleg Kibirev <oleg@math.CSUFresno.EDU>
___(_) _ _)_
/ _) finger oleg@math.math.CSUFresno.EDU for PGP public key
|___/ Purr!

 \ /
  Last update: 2005-03-22 13:36    [W:0.075 / U:3.056 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site