lkml.org 
[lkml]   [2006]   [Feb]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: (pspace,pid) vs true pid virtualization
    >>this is mandatory, as it is required to kill any process
    >>from the host (admin) context, without entering the pid
    >>space (which would lead to all kind of security issues)
    >
    >
    > Giving admin processes the ability to enter pid spaces seems like it
    > solves an entire class of problems, right?. Could you explain a bit
    > what kinds of security issues it introduces?
    Enter is not always possible.
    For example when you have exhausted your resources in VPS.
    (e.g. hit process limit inside).
    And you can't make enter without resource limitations, since it will be
    a security hole then.

    Kirill

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-02-20 11:29    [W:3.578 / U:0.680 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site