lkml.org 
[lkml]   [1999]   [Apr]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] Capabilities, this time in elf section
    On Sat, 10 Apr 1999, Horst von Brand wrote:

    > Problem is that jschmoe can take a hex editor to any file she wants, and
    > make it "ALL CAPS" and then SUID it, or just wait for somebody capable to
    > run it. Even if she hasn't got the "set capability" cap. That's why
    > capabilities can not reside in the executable file itself. But if they are
    > in the filesystem, you need specialized tools that can recover/set them.
    > F.ex. tar(1), so you can create backups that preserve them, etc. Or you
    > forget about the dearly beloved Unix way of doing things, and get a
    > different set of tools...


    I was under the impression that caps in elf headers would only subtract
    from what the user already had. So this would only be an issue if the user
    could make the exec suid root.

    > Also note that the capability to write to raw disk is in essence equivalent
    > to the current root power in both schemes.


    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:51    [W:2.624 / U:0.004 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site