lkml.org 
[lkml]   [1998]   [Jun]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Secure-linux and standard kernel
From
Date
MOLNAR Ingo <mingo@valerie.inf.elte.hu> writes:

> btw, in some sense it's even more secure, capabilities are 'embedded
> permanently in the binary' and an admin cannot mis-configure the system.
> Also, it integrates the responsibility of aquiring capabilities with the
> source code itself, which isnt a bad concept either. We might want to
> modify 'ls' to look at the file if it's setuid root, and display fancy
> stuff if the binary is in 'secure capabilities mode'. [I'm not sure how
> this whole concept could be implemented best though.]

It would not help for bugs like the infamous LOCALEPATH holes (that were in the startup
code).

Also in C++ programs a lot of user code can run in global object contructors before regular
main(). This code could contain holes too.

If you want to make this secure you hooks in the startup code to drop priviledges even
earlier I think.

-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:43    [from the cache]
©2003-2011 Jasper Spaans