Messages in this thread | | | Date | Thu, 12 Jan 2012 18:03:47 -0600 | Subject | Re: [PATCH PLACEHOLDER 1/3] fs/exec: "always_unprivileged" patch | From | Will Drewry <> |
| |
On Thu, Jan 12, 2012 at 5:47 PM, Linus Torvalds <torvalds@linux-foundation.org> wrote: > On Thu, Jan 12, 2012 at 3:38 PM, Will Drewry <wad@chromium.org> wrote: >> This patch is a placeholder until Andy's (luto@mit.edu) patch arrives >> implementing Linus's proposal for applying a "this is a process that has >> *no* extra privileges at all, and can never get them". > > I think we can simplify and improve the naming/logic by just saying > "can't change privileges". > > I'd argue that that even includes "can't drop them", just to make it > really clear what the rules are. > > So the usage model would be to first simply set the privileges to > whatever you want the sandbox to be, and then enter the restricted > mode.
That sounds ideal to me. This placeholder is certainly insufficient then. I'll keep tweaking this patch then until its successor emerges.
Thanks! will
| |