A bid to resurrect Linux capabilities
Posted Sep 15, 2006 9:27 UTC (Fri) by
jbailey (subscriber, #16890)
In reply to:
A bid to resurrect Linux capabilities by giraffedata
Parent article:
A bid to resurrect Linux capabilities
I suspect yes. The problem in that scenario is that you still have to go to full priviledges first. So while the attack vector is very small and unlikely, it's not non-existant.
If we had fullsystem-based priviledge raises beyond just SUID/SGID, I suspect it would be taken up quite quickly by distros.
Tks,
Jeff Bailey
(
Log in to post comments)