lkml.org 
[lkml]   [1999]   [May]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Capabilities done right [diff against 2.3.1]
       Date: Tue, 18 May 1999 11:04:55 +0200
    From: Pavel Machek <pavel@bug.ucw.cz>

    That's hard part, because this way dynamic linker + anything run
    before main() runs with elevated priviledges. That's problem, at least
    for me.

    I just came up with a random thought ---- and I'd need to do more
    investigating about the ELF format to make sure this is actually doable,
    but I believe we can control the order in which constructurs get run,
    yes?

    So why not simply put the code which drops the privileges in a
    constructor which is engineered to be run first? If the way that
    constructor is setup uses a stylized code can be easily found by a
    setcap or checkcap program (i.e., give the constructor a standard name,
    and store the capability restriction in a standard variable referenced
    by the constructor), then you can get the ability to query/set the
    capabilities, but it's done in such a way which doesn't require any
    special kernel hacks to enable the feature.

    This is actually a really cool thing, since it means that people could
    start using it with the current stable kernel, without needing any
    kernel patches or needing to wait for Linux 2.4 to ship.

    - Ted

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:51    [W:4.732 / U:0.000 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site