[lkml]   [2000]   [Feb]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Capabilities
    Paul Jakma wrote:
    > On Sun, 20 Feb 2000, Andreas Gruenbacher wrote:
    > > The kernel should boot up in non-trusted mode (with root and SUID root binaries
    > > recieving full capabilities, as it's implemented now).
    > >
    > > A simple syscall could then switch the kernel to trusted mode. Afterwards, root
    > > is treated as all other others.
    > >
    > > Switching to trusted mode then can easily be done in init scripts, ...
    > >
    > > Of course, there shouldn't be a way to switch back to non-trusted mode...
    > >
    > there shouldn't be any switch at any time.
    > Either your installation is compatible with a trust kernel or it's not.
    > And if it is, then by booting up in non-trusted mode you leave a small
    > window where the system is at risk. And hence switching to trusted mode
    > would be meaningless.

    It all depends on your risk evaluation. Once you gain physical access to a
    machine, there's no real protection anymore. If the goal is merely to protect
    the system from attacks over the network, switching to trusted mode before the
    network interfaces are initializes is perfectly safe.


    Andreas Gruenbacher,
    Contact information:

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:56    [W:0.020 / U:21.824 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site