Messages in this thread | | | From | (Alan Cox) | Subject | Re: ext3 to include capabilities? | Date | Fri, 2 Apr 1999 00:02:16 +0100 (BST) |
| |
> Better way:
Not really
> 1. Put capabilities information in the executable header. > 2. Mark the executable setuid root. > 3. Have the kernel check for #1 if #2, and prefer #1 if present.
That confuses everyones security scripts. It makes the binary run as root on an older system, so if you downgrade you get a massive security hole
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |