Messages in this thread | | | Date | Wed, 21 Apr 2010 10:27:39 +0100 | From | Alan Cox <> | Subject | Re: [PATCH 3/3] p9auth: add p9auth driver |
| |
> This is a change which must be discussed. The use of this > privilege can be completely prevented by having init remove > CAP_GRANT_ID from its capability bounding set before forking any > processes.
Which is a minor back compat issue - but you could start without it and allow init to add it.
It seems a very complex interface to do a simple thing. A long time ago there was discussion around extending the AF_UNIX fd passing to permit 'pass handle and auth' so you could send someone a handle with a "become me" token attached.
Alan
| |