[lkml]   [1996]   [Jun]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Ideas for v2.1
From: Marc Unangst <>
> I'm concerned about doing access control. I want to prevent
> unauthorized users from making network connections to certain
> addresses or ports, while still allowing access to other services.
> This type of control really has to be implemented in the kernel,
> since otherwise it can be broken if the user writes their own
> program to make the appropriate system calls, or uploads their
> own FTP/telnet client.

You need a way to keep someone from setting the execute bits.
Every permission change should be checked against a mask,
which you might set to limit permissions to 0640.

 \ /
  Last update: 2005-03-22 13:37    [W:0.021 / U:21.724 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site