lkml.org 
[lkml]   [2012]   [Jan]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: [PATCH PLACEHOLDER 1/3] fs/exec: "always_unprivileged" patch
    From
    On Thu, Jan 12, 2012 at 5:47 PM, Linus Torvalds
    <torvalds@linux-foundation.org> wrote:
    > On Thu, Jan 12, 2012 at 3:38 PM, Will Drewry <wad@chromium.org> wrote:
    >> This patch is a placeholder until Andy's (luto@mit.edu) patch arrives
    >> implementing Linus's proposal for applying a "this is a process that has
    >> *no* extra privileges at all, and can never get them".
    >
    > I think we can simplify and improve the naming/logic by just saying
    > "can't change privileges".
    >
    > I'd argue that that even includes "can't drop them", just to make it
    > really clear what the rules are.
    >
    > So the usage model would be to first simply set the privileges to
    > whatever you want the sandbox to be, and then enter the restricted
    > mode.

    That sounds ideal to me. This placeholder is certainly insufficient
    then. I'll keep tweaking this patch then until its successor emerges.

    Thanks!
    will


    \
     
     \ /
      Last update: 2012-01-13 01:07    [W:4.558 / U:0.024 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site