[lkml]   [2002]   [Nov]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Filesystem Capabilities in 2.6?
    Linus Torvalds <> writes:

    > On the other hand, I have this suspicion that the most secure setup is one
    > that the sysadmin is _used_ to, and knows all the pitfalls of. Which
    > obviously is a big argument for just maintaining the status quo with suid
    > binaries.

    As is shown every now and then, when the next security hole is
    reported. So we stay at the lowest common denominator.

    I've always had good experience with educating people, not with
    dumbing them down. But maybe I've been just lucky then and worked
    with very smart people.

    > We have decades of knowledge on how to minimize the negative impact of
    > suid (I've used sendmail as an example of a suid program, and yet last I
    > looked sendmail was actually pretty careful about dropping all unnecessary
    > privileges very early on).

    So we throw out the baby with the bath water. This is conservatism at
    it's worst.

    > And as Al points out, new security features don't mean that you can just
    > stop being careful.

    Stating the obvious. Capabilities are not an end in itself, nor is suid
    root. It's just another line of defense to help with these binaries,
    which are _not_ capability aware.

    Regards, Olaf.
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:30    [W:0.021 / U:11.552 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site