Messages in this thread | | | Date | Mon, 21 Feb 2000 15:38:41 +0100 | From | Pavel Machek <> | Subject | Re: Capabilities |
| |
Hi!
> - Once we have file-based capabilities, we can implement that. Here, the idea I > posted before (which was shamelessly stolen from another OS) can be used. The > kernel boots in ``non-trusted'' mode; SUID root binaries get all capabilities. A > process in the init scripts then switches the system into ``trusted'' mode. > After that, SUID root binaries are treated no different anymore.
Switching into another mode of operation is just plain ugly. We can work without that. Pavel -- I'm pavel@ucw.cz. "In my country we have almost anarchy and I don't care." Panos Katsaloulis describing me w.r.t. patents me at discuss@linmodems.org
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |