lkml.org 
[lkml]   [2008]   [Aug]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRadical idea? Remove all automatic privilege escalation base on executable file attributes!
From
Date

That is, remove

- setuid/setgid feature from Linux

- cancel the capability attributes in files (or only only allow
downgrading of capabilities)

(e.g. mount everything as nosuid or something, but eventually, the
code could be removed from the kernel)

The only way to escalate privileges would be to request starting of
the executable by some daemon (like upstart), which would grant or
deny the request based totally on some user space policies.

If granted,

- would fork
- child would setup the specified credentials to self
- execve (or equivalent)



\
 
 \ /
  Last update: 2008-08-08 12:35    [W:0.023 / U:1.192 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site