lkml.org 
[lkml]   [2000]   [Feb]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Capabilities

Jesse Pollard writes:

> Now in the case of XFree86 - It shouldn't have privileges,
> but does due to its' historical implementation. With the advent
> of frame buffer based servers, it will loose the setuid capability.
> As far as MLS goes, it is necessary to establish the users security
> profile before the X server may be operated.

I think I know what you mean. IRIX does this AFAIK, and it sucks.

Users log in at one security level. The whole X server runs at
this one level. If you need to operate at two levels, you have
to log out and log back in again at another level.

This is totally user-hostile, so it won't be used very much.
The X server and window manager must be trusted software.
This is what Trusted Solaris claims to do. Windows get marked
with security data. Cut-and-paste is controlled.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:56    [W:0.047 / U:0.648 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site