Messages in this thread | | | Date | Thu, 25 Mar 1999 15:44:12 +0100 (CET) | From | Andreas Kostyrka <> | Subject | Re: Implementing a dynamic root id |
| |
On Thu, 25 Mar 1999 kernel@vdr.qc.ca wrote:
> We thought of an simple scheme to counter this. We could dynamicly > alocate the root ID. Meaning that somewhere in /proc, there is a file > awating to be edited and that could change the root ID (and all of the > processes that run whith this uid) from 0 to whatever I want, anytime, > without rebooting my system. I understand that this would imply making > some system calls lie about the actual ID's of the real root user, his > processes and owned files. Not only that, it would imply patching almost any security relevant Unix software (sendmail, httpd, etc.) which check their uid to see if they have magic root permissions. So everywhere you would need to replace if(getuid()==0) with much more complicated code.
Andreas
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |