Linux-kernel mailing list archive 1999-22,: Re: [PATCH]: alternative security - special gids

# Re: [PATCH]: alternative security - special gids

Augusto Cesar (bishop@sekure.org)
Mon, 31 May 1999 13:38:27 -0300 (EST)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Marc SCHAEFER: "Re: [PATCH]: alternative security - special gids"
- Previous message: rewt: "upload timeouts as of 2.2.9"

On Mon, 31 May 1999, Marc SCHAEFER wrote:

>
>
> On Sun, 30 May 1999, Augusto Cesar wrote:
>
> > This a good idea, I can set the initial value as 0 (root gid) and if the
> > user needs the special gids they can set via /proc.
>
> No, please don't. Make it so that it doesn't depend on a particular
> group. Even if using a 0-group could have other security implication,
> I am convinced that we should not add some more semantic until
> specifically asked.
>
> So, my request: initially, only root (or capability) can bind() to
> ports below 1024. IF root echo group > /proc/some_file, group becomes
> authorized.
>

Ok, I understand your request now, Im working in a new version of the
patch, soon I put in http://bishop.sekure.org for download.

    --
    Augusto Cesar
    Sekure SDI
    http://www.sekure.org

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

- Next message: Marc SCHAEFER: "Re: [PATCH]: alternative security - special gids"
- Previous message: rewt: "upload timeouts as of 2.2.9"