lkml.org 
[lkml]   [1996]   [Jun]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: ideas for kernel 2.1
Date
Hi,

> >Using securelevel and the immutable attribute of ext2 would solve
> >your problem without your suggestion's problems.
>
> Better yet, isn't this the sort of thing POSIX.6 permissions were
> designed for? Just give each program the permissions it needs...
> (There's a mailing list for such discussion, but I can't remember
> the address. Sorry.)

Securelevel & the immutable attibute present a small and quick solution
also available in other Unices like BSD 4.4 and that still is compatible
with the current UNIX style security system in Linux.

POSIX.6 is far bigger project that changes the fundamental principles
(uid/gid, SETUID/SETGID) on which UNIX security is based. Anyway, the
daring mind can test the POSIX.6 patches in

ftp://ftp.lmh.ox.ac.uk/pub/linux/kernel/patch/posix6-v1.diff.gz

Ralf


\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.044 / U:0.344 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site