lkml.org 
[lkml]   [1999]   [Jul]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [RFC][PATCH] scripts with stdin replaced
Date
From
Ralf Baechle <ralf@uni-koblenz.de> said:
> On Tue, Jul 06, 1999 at 08:44:23AM -0400, Horst von Brand wrote:
> > > Probably the only safe well-known interpreter is perl, and that runs
> > > setuid scripts itself already.

> > That is a kludge, and it won't work at all when capabilities are done right
> > in the filesystem.

> I don't see why Perl's mechanism for SUID scripts used on Linux couldn't
> be expanded to cover capabilites as well. Except that that would make
> as small part of Perl the single point of failure in the security system.

I don't want to trust an all-capable Perl interpreter. Not on a system that
is important/critical enough to be secured by capabilitites. A clean
solution is given if the script carries capabilities, the kernel notes this
and invokes the interpreter with the capabilities the filesystem grants. In
this case it is useless to trick the interpreter.
--
Horst von Brand vonbrand@sleipnir.valparaiso.cl
Casilla 9G, Viña del Mar, Chile +56 32 672616


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:52    [W:0.060 / U:0.924 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site