lkml.org 
[lkml]   [1996]   [Jun]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Ideas for v2.1
Date
From: Marc Unangst <mju@cs.cmu.edu>
> I'm concerned about doing access control. I want to prevent
> unauthorized users from making network connections to certain
> addresses or ports, while still allowing access to other services.
...
> This type of control really has to be implemented in the kernel,
> since otherwise it can be broken if the user writes their own
> program to make the appropriate system calls, or uploads their
> own FTP/telnet client.

You need a way to keep someone from setting the execute bits.
Every permission change should be checked against a mask,
which you might set to limit permissions to 0640.


\
 
 \ /
  Last update: 2005-03-22 13:37    [W:1.097 / U:0.008 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site