lkml.org 
[lkml]   [1999]   [Apr]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: caps in elf, next itteration (the hack get's bigger)
Date
Just a thought,

"Stephen C. Tweedie" <sct@redhat.com> writes:

> On Wed, 14 Apr 1999 17:21:44 +0200 (CEST), Ingo Molnar
> <mingo@chiara.csoma.elte.hu> said:
>
> > The point is to get rid of random setuid root binaries (ping,
> > traceroute, etc.) and system daemons (klogd, syslogd, lpd, etc.)
> > executing with full system priviledges.
>
> It is much more than that: it is to prevent privileges leaking, so
> that bugs in these daemons do not compromise the security of other
> parts of the OS.

Therefore there should be a privilege to exec(2), if there isn't
already, which most daemons should deny themselves.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.121 / U:0.976 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site