Messages in this thread | | | Subject | Re: [PATCH] Capabilities, this time in elf section | Date | Thu, 15 Apr 1999 18:40:42 -0400 | From | "Brandon S. Allbery KF8NH" <> |
| |
In message <Pine.LNX.3.96.990415133431.31179A-100000@millenium.salem.k12.va.us> , "David L. Parsley (lkml account)" writes: +----- | No kidding. If you're running with this new security model, you should | re-think running system binaries over nfs. This, btw, is not just my own | opinion. +--->8
But what of AFS (or, if you prefer, Arla)? It has even less support for Unix file metadata... but it *does* have security, both for authentication and data (at least in theory for data, by setting the Rx RPC layer to do encrypted transfers). It is reasonable to expect binaries from an AFS directory that only allows administrators write access to be secure... but the metadata is worthless for identifying such. (Even the setuid bit has only spotty support.)
-- brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net system administrator [WAY too many hats] allbery@ece.cmu.edu carnegie mellon / electrical and computer engineering KF8NH We are Linux. Resistance is an indication that you missed the point.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |