Messages in this thread | | | Date | Mon, 11 Jan 2010 12:53:32 +0100 | From | Pavel Machek <> | Subject | Re: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4) |
| |
Hi!
> * If network access is restored over suid, then we can leak data over > ping or any number of other routes, so that's right out.
ACK.
> * If network access is denied over suid, there are concerns of denial > of service in certain configurations.
So that should be right out, too.
> * If suid is denied entirely, we have no denial of service or > information leak concerns via the suid mechanism (since the mechanism > is completely unusable). And if we really do need to execute something > at an elevated privilege, we can ask a helper daemon to do it on our > behalf.
Yes please. This is the obvious solution. Pavel
-- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
| |