Messages in this thread | | | From | Bodo Eggert <> | Subject | Re: [PATCH] exec: Only allow a threaded init to exec from the thread_group_leader | Date | Sun, 29 Jan 2006 14:36:13 +0100 |
| |
Eric W. Biederman <ebiederm@xmission.com> wrote:
> If process id namespaces become a reality init stops being > terribly special, and becomes something you may have several > of running at any one time. If one of those inits is compromised > by a hostile user I having the whole system go down so we can > avoid executing a cheap test sounds terribly wrong. That is > why I really care.
There are virtual environments like linux-vserver(.org), where init is running several times on one system, each with their local/virtual pid being 1. Killing them does no harm unless it's the real init. I asume in your system, the real init will exist under the control of the administrator, too, so there should be no danger. -- Ich danke GMX dafür, die Verwendung meiner Adressen mittels per SPF verbreiteten Lügen zu sabotieren. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |