[lkml]   [1996]   [Jun]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: ideas for kernel 2.1
>>         registermagiccookie(sysCOOKIE);
> You'd have to make *ALL* setuid programs readonly by root.
> Otherwise it would be too easy to get the cookie.

No, the cookie could be done using RSA, somewhat like a PGP signature.
You only need to keep the kernel itself and/or lilo readonly.
From what I've heard, the elf binary format makes it easy to attach
stuff like this to the end of an executable.

This way root just signs all suid executables and the kernel
checks for the signature before running them.

 \ /
  Last update: 2005-03-22 13:37    [W:0.069 / U:2.396 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site