lkml.org 
[lkml]   [2009]   [Jan]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] Security: Implement and document RLIMIT_NETWORK.
    On Wed, Jan 07, 2009 at 01:35:13PM -0500, C. Scott Ananian (cscott@laptop.org) wrote:
    > I haven't reviewed the patch to confirm this, but this is how I would
    > expect RLIMIT_NETWORK functions. A trusted process like inetd (say)
    > would accept a network connection and create a file handle. It would
    > then fork, drop the hard and soft RLIMIT_NETWORK to 0, and then exec
    > the untrusted client program. This would allow the untrusted program
    > to use the 'trusted' network resource via the open file handle, but
    > prevent it from (say) leaking sensitive transaction data by making
    > further connections to some other network resource. (There are better
    > use cases than inetd, of course.)

    So effectively it requires higher-prio process to set the limit and then
    drop own priviledges. And by default network rlimit is turned off, so
    this does not work for usual processes?

    The same inetd may setup iptables rule btw. I do not say this is the way
    to go, just that it already exists.

    > According to man 2 setrlimit, "A child process created via fork(2)
    > inherits its parent's resource limits. Resource limits are preserved
    > across execve(2).".

    Yes, rlimits are copied in copy_signal(), but when parent sets the
    rlimit it is not updated in the childs, so was my question, sorry for
    confusion.

    --
    Evgeniy Polyakov


    \
     
     \ /
      Last update: 2009-01-07 20:05    [W:2.817 / U:0.192 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site