lkml.org 
[lkml]   [1999]   [Apr]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Capabilities under Linux
Date
From
Y2K <y2k@y2ker.com> said:

[...]

> The current elf_header solution does not grant *any* privledges just is
> used to revoke them. elf_headers should never be used to grant privledges
> that we can agree on.

How can it be of any use then? You _still_ have an omnipotent root account
that can be broken into, or whose processes can be hijacked? Capabilities
aren't about "taking away", they are abount granting specific rights.

OK, if the status of the "capabilities in ELF" suggestion is that it only
takes away rights, the case is definitely closed for me.
--
Horst von Brand vonbrand@sleipnir.valparaiso.cl
Casilla 9G, Viña del Mar, Chile +56 32 672616

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.065 / U:1.320 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site