Messages in this thread | | | From | Bernd Eckenfels <> | Subject | Re: posix capabilities inheritance | Date | Fri, 24 Oct 2003 04:19:10 +0200 |
| |
In article <200310240136.h9O1aaOU002931@pasta.boston.redhat.com> you wrote: > However, I agree that it's often not viable to require application > changes to achieve the desired result.
What does often mean? This is the Open Source Linux, and here we can do changes to the source if it is good for securtiy, architecture, speat, whatever.
Of course a solution which does the right thing without programming is even better - Watermarking or something. But I guess wie can combine those. The typical internet server has already enough cruft for chrooting, priveledge dropping and FD passing to work around for example port priveledges, a REAL solution wont make it worse.
Bernd y - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |