[lkml]   [2000]   [Feb]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Capabilities
Paul Jakma wrote:
> On Sun, 20 Feb 2000, Andreas Gruenbacher wrote:
> > The kernel should boot up in non-trusted mode (with root and SUID root binaries
> > recieving full capabilities, as it's implemented now).
> >
> > A simple syscall could then switch the kernel to trusted mode. Afterwards, root
> > is treated as all other others.
> >
> > Switching to trusted mode then can easily be done in init scripts, ...
> >
> > Of course, there shouldn't be a way to switch back to non-trusted mode...
> >
> there shouldn't be any switch at any time.
> Either your installation is compatible with a trust kernel or it's not.
> And if it is, then by booting up in non-trusted mode you leave a small
> window where the system is at risk. And hence switching to trusted mode
> would be meaningless.

It all depends on your risk evaluation. Once you gain physical access to a
machine, there's no real protection anymore. If the goal is merely to protect
the system from attacks over the network, switching to trusted mode before the
network interfaces are initializes is perfectly safe.


Andreas Gruenbacher,
Contact information:

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:56    [W:0.147 / U:3.528 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site