Re: disk-destroyer.c

Michael Bacarella (mbac@nyct.net)
Fri, 21 Jul 2000 10:55:21 -0400 (EDT)

> On Thu, 20 Jul 2000, Andre Hedrick wrote:
>
> > The object is to protect this from happening even if you are ROOT or have
> > stolen ROOT priviledges.
>
> You can't stop root from doing anything, even in theory - root has access
> to the kernel image, either on disk or in RAM and can patch it to do
> whatever they'd like..
>
> It's nice to protect from doing stupid things by accident, but let's not
> pretend we're doing anything more than that.

Such a fallacy along the lines of preventing root from shooting
himself in the foot exists now. It is impossible to edit a directory
itself. Sure, you COULD hack your kernel to let you do that, but that's
not the point.

You can hack your kernel to allow all users full privileges. The idea is
to make the default kernel not insane.

-MB

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/