Messages in this thread | | | Subject | Radical idea? Remove all automatic privilege escalation base on executable file attributes! | From | Markku Savela <> | Date | Fri, 08 Aug 2008 13:31:51 +0300 |
| |
That is, remove
- setuid/setgid feature from Linux
- cancel the capability attributes in files (or only only allow downgrading of capabilities)
(e.g. mount everything as nosuid or something, but eventually, the code could be removed from the kernel)
The only way to escalate privileges would be to request starting of the executable by some daemon (like upstart), which would grant or deny the request based totally on some user space policies.
If granted,
- would fork - child would setup the specified credentials to self - execve (or equivalent)
| |