lkml.org 
[lkml]   [1999]   [Apr]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: caps in elf headers: use the sticky bit!
Hi Martin.

>> No, the kernel still must perform checks before a process
>> creates a file with the sticky bit (=cap flag) set. Similar to
>> the current situation where root can unpack a setuid root
>> binary, but a normal user cannot. Currently, the kernel doesn't
>> care anything about the 'sticky' bit on files; I'm just saying
>> let's use it for something useful.

> It won't solve the `old kernel' problem.

> If you use the sticky bit for this purpose, a similar situation
> can happen: a normal user sets the sticky bit for a file when
> running an old kernel where it isn't restricted and then the
> file becomes privileged after switching kernels. This can be
> solved by ignoring the sticky bit on files not owned by root.

See my recent post on this subject for a simple solution to that which
retains the sticky bit independant of uid/gid...

> "WINDOWS - What Idiotic New Disk Operating Windowing System!"

LOL...

Best wishes from Riley.

+----------------------------------------------------------------------+
| There is something frustrating about the quality and speed of Linux |
| development, ie., the quality is too high and the speed is too high, |
| in other words, I can implement this XXXX feature, but I bet someone |
| else has already done so and is just about to release their patch. |
+----------------------------------------------------------------------+
* ftp://ftp.MemAlpha.cx/pub/rhw/Linux
* http://www.MemAlpha.cx/kernel.versions.html


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.065 / U:0.240 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site