Messages in this thread | | | Date | Sun, 11 Apr 1999 21:05:34 +0100 (GMT) | From | Riley Williams <> | Subject | Re: caps in elf headers: use the sticky bit! |
| |
Hi Martin.
>> No, the kernel still must perform checks before a process >> creates a file with the sticky bit (=cap flag) set. Similar to >> the current situation where root can unpack a setuid root >> binary, but a normal user cannot. Currently, the kernel doesn't >> care anything about the 'sticky' bit on files; I'm just saying >> let's use it for something useful.
> It won't solve the `old kernel' problem.
> If you use the sticky bit for this purpose, a similar situation > can happen: a normal user sets the sticky bit for a file when > running an old kernel where it isn't restricted and then the > file becomes privileged after switching kernels. This can be > solved by ignoring the sticky bit on files not owned by root.
See my recent post on this subject for a simple solution to that which retains the sticky bit independant of uid/gid...
> "WINDOWS - What Idiotic New Disk Operating Windowing System!"
LOL...
Best wishes from Riley.
+----------------------------------------------------------------------+ | There is something frustrating about the quality and speed of Linux | | development, ie., the quality is too high and the speed is too high, | | in other words, I can implement this XXXX feature, but I bet someone | | else has already done so and is just about to release their patch. | +----------------------------------------------------------------------+ * ftp://ftp.MemAlpha.cx/pub/rhw/Linux * http://www.MemAlpha.cx/kernel.versions.html
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |