Messages in this thread | | | Date | Tue, 29 Feb 2000 21:30:25 -0500 (EST) | From | "Albert D. Cahalan" <> | Subject | Re: Capabilities |
| |
Jesse Pollard writes:
> Now in the case of XFree86 - It shouldn't have privileges, > but does due to its' historical implementation. With the advent > of frame buffer based servers, it will loose the setuid capability. > As far as MLS goes, it is necessary to establish the users security > profile before the X server may be operated.
I think I know what you mean. IRIX does this AFAIK, and it sucks.
Users log in at one security level. The whole X server runs at this one level. If you need to operate at two levels, you have to log out and log back in again at another level.
This is totally user-hostile, so it won't be used very much. The X server and window manager must be trusted software. This is what Trusted Solaris claims to do. Windows get marked with security data. Cut-and-paste is controlled.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |