lkml.org 
[lkml]   [1999]   [Apr]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: updated proposal for cap in elf
Y2K wrote:

> I think you read too many extremes into it.
> CAP_LINUX_ADDUSER_2_ETC_PASSWD
> was never intended.

The POSIX spec allows you to specify the aforementioned capability,
and DG has such. Mr. Spencer did intend the spec to allow this,
and then implemented it, to boot. The spec is intended to allow
each implementer to choose their own flavor of poison. My experiance
leads me to believe that application level capabilities are a
poor choice, and that mechanisms directed at that problem, such
as program access lists, are more appropriate. (just waht we need,
yet another security mechanism, right?)

--

Casey Schaufler voice: (650) 933-1634
casey@sgi.com fax: (650) 933-0170

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.030 / U:0.532 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site