[lkml]   [1999]   [Apr]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] Capabilities, this time in elf section
    brandon s. allbery writes:

    > But what of AFS (or, if you prefer, Arla)? It has even less support
    > for Unix file metadata... but it *does* have security, both for
    > authentication and data (at least in theory for data, by setting
    > the Rx RPC layer to do encrypted transfers). It is reasonable to
    > expect binaries from an AFS directory that only allows administrators
    > write access to be secure... but the metadata is worthless for
    > identifying such. (Even the setuid bit has only spotty support.)

    AFS has several extra bits that could be used. How about the F bit?

    I'm really starting to think that the trust indicator bit should
    be determined by filesystem type and/or mount option. For NFS,
    the setuid bit indicates trust. For AFS, you can use the F bit.
    For vfat :-) you have the system bit.

    One could even have a VFS function to ask about trust.

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:51    [W:0.031 / U:10.684 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site