Messages in this thread | | | Date | Tue, 25 Apr 2006 10:43:17 -0700 | From | Seth Arnold <> | Subject | Re: [RFC][PATCH 0/11] security: AppArmor - Overview |
| |
On Tue, Apr 25, 2006 at 06:52:40PM +0200, Arjan van de Ven wrote: > a scary angle is that a compromised "confined" process can still > reconfigure all your networking to the point that it can forward and NAT
If you have decided to allow the process to use CAP_NET_ADMIN by adding the text "capability net_admin," to the profile in question, I fail to see how this is "scary" -- in fact, this is exactly what you have chosen to allow this process to do.
One of our developers has a profile set of 827 profiles that we use for testing system functionality and our tools; twenty of those profiles have "capability net_admin" granted. The other 807 profiles do not have the ability to reconfigure the network at will.
I hope this clears up your concern. Thanks Arjan
[unhandled content-type:application/pgp-signature] | |