lkml.org 
[lkml]   [1999]   [Apr]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH] Capabilities, this time in elf section
Date
From
In message <Pine.LNX.3.96.990415133431.31179A-100000@millenium.salem.k12.va.us>
, "David L. Parsley (lkml account)" writes:
+-----
| No kidding. If you're running with this new security model, you should
| re-think running system binaries over nfs. This, btw, is not just my own
| opinion.
+--->8

But what of AFS (or, if you prefer, Arla)? It has even less support for Unix
file metadata... but it *does* have security, both for authentication and
data (at least in theory for data, by setting the Rx RPC layer to do encrypted
transfers). It is reasonable to expect binaries from an AFS directory that
only allows administrators write access to be secure... but the metadata is
worthless for identifying such. (Even the setuid bit has only spotty support.)

--
brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net
system administrator [WAY too many hats] allbery@ece.cmu.edu
carnegie mellon / electrical and computer engineering KF8NH
We are Linux. Resistance is an indication that you missed the point.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.056 / U:1.060 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site