lkml.org 
[lkml]   [1999]   [Jul]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [security]: kernel ioctl()'s [3]
Hello,
> Thinking about the importance of avoiding a reboot during system
> upgrades: I presume that, unless the containing directory is immutable
> or append_only, that such files can be renamed?
System then can be "upgraded" by cracker. As immutable files are for
protecting them, the policy should be very strict. Of course, you can give
yourself cap_immutable capability if you want to upgrade.

With respect,
Domas Mituzas


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:52    [W:0.351 / U:0.888 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site